CVE ID :CVE-2026-111494
Published : Nov. 5, 2026, 10:17 p.m. | 51 minutes ago
Description :Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. An attacker capable of intercepting the victim’s traffic could read and modify communications, including credentials and personal data.
Severity: 9.1 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more…
Published : Nov. 5, 2026, 10:17 p.m. | 51 minutes ago
Description :Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. An attacker capable of intercepting the victim’s traffic could read and modify communications, including credentials and personal data.
Severity: 9.1 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more…