{"id":"CVE-2026-111491","published":"2026-11-05T22:17:43.743","lastModified":"2026-11-05T22:36:02.320","description":"Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences. An attacker with access to the device's local data or a backup could retrieve usernames and passwords and use them to gain unauthorized access to accounts on the platform.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-256"],"vendors":[],"products":[],"references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tpc-softwares-matchpoint","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}