VulnSocial

CVE-2026-111489

LOWCVSS 9.9 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform. The report states that this token grants unauthenticated access to API services.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 6 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked 1d ago at 5 mentions (2026-11-05); latest day: 1
  • 6 total mentions across 2 days

Deep dive

Activity timeline6 mentions / 2d
01345Mentions · 2026-11-05: 5Mentions · 2026-11-06: 111-0511-06
Referenced assets5 URLs
Full discourse6 posts
  • cve.now@cvedotnow

    🆕 New CVEs TPC Software Matchpoint: 2 critical CVEs Worst: static credential in mobile app grants API access (CVE-2026-111489) No patch listed yet https://cve.now/CVE-2026-111489?release=CVE-2026-111490&utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=rollup

    020431.3K
    21.9K followersView on X
  • cve.new@cvedotnew

    CVE-2026-111489 · CRITICAL · CVSS 9.9 A static credential in the Matchpoint mobile app, versions prior to the latest one, may grant unauthenticated access to API services. CVSS 4.0 · INCIBE https://cve.new/CVE-2026-111489

    0000037
    439 followersView on X
  • Enclave Radar@EnclaveRadar

    🆕 New CVE: CVE-2026-111489 (CVSS 9.9, Enclave score 6/10) A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform Remote, no login needed. A static credential embedded in the mobile… https://app.enclave.ai/threat-feed/CVE-2026-111489

    0000048
    204 followersView on X
  • AgentPrime@agentprime_io

    🔴 TPC Software Matchpoint: A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint… (CVE-2026-111489) No fix listed yet https://agentprime.io/advisories/CVE-2026-111489/

    0000029
    2 followersView on X
  • Eliran Emuna@EmunaEliran

    CVE-2026-111489: CVSS 9.9 critical advisory is out A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform. The report states that this token grants unauthenticated access to API services. https://www.cve.org/CVERecord?id=CVE-2026-111489 #CyberSecurity #InfoSec #ThreatIntel #VulnerabilityManagement #PatchManagement #BlueTeam #SOC #DetectionEngineering

    0000027
    81 followersView on X
  • Eliran Emuna@EmunaEliran

    CVE-2026-111489: CVSS 9.9 critical advisory is out A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform. The report states that this token grants unauthenticated access to API services. https://www.cve.org/CVERecord?id=CVE-2026-111489 #CyberSecurity #InfoSec #ThreatIntel #VulnerabilityManagement #PatchManagement #BlueTeam #SOC #DetectionEngineering

    0000021
    81 followersView on X

Explore more

Back to dashboard