← CVE Radar
CVE-2026-111491Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences
Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences. An attacker with access to the device's local data or a backup could retrieve usernames and passwords and use them to gain unauthorized access to accounts on the platform.
6.9 MEDIUMEPSS 0.11%Not in KEVNVD: Deferred
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.9 | MEDIUM | 4.0INCIBE (CNA) | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Details
- CVE ID
- CVE-2026-111491
- Status
- Deferred
- Assigner (CNA)
- INCIBE
- Published
- Nov 5, 2026
- Last modified
- 2026-11-05 22:36 UTC
- Weaknesses
- CWE-256 · Plaintext storage of a password
Affected Products
As published by the CNA in the CVE record.
TPC SoftwareMatchpoint1 version range
- Versions prior to latest one