Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. An attacker capable of intercepting the victim's traffic could read and modify communications, including credentials and personal data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
🆕 New CVE TPC Software Matchpoint: improper TLS validation enables interception in Android app (CVE-2026-111494) An attacker on the network path can read and alter credentials and personal data in the app's traffic. No patch listed yet https://cve.now/CVE-2026-111494?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical
🔴 TPC Software Matchpoint: Incorrect validation of TLS certificates in the MatchPoint Android app (CVE-2026-111494) No fix listed yet https://agentprime.io/advisories/CVE-2026-111494/
🆕 New CVE: CVE-2026-111494 (CVSS 9.1) Incorrect validation of TLS certificates in the MatchPoint Android app Remote, no login needed. Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any… https://app.enclave.ai/threat-feed/CVE-2026-111494
CVE-2026-111494: CVSS 9.1 critical advisory is out Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. https://www.cve.org/CVERecord?id=CVE-2026-111494 #CyberSecurity #InfoSec #ThreatIntel #VulnerabilityManagement #PatchManagement #BlueTeam #SOC #DetectionEngineering