{"id":"CVE-2026-111494","published":"2026-11-05T22:17:44.193","lastModified":"2026-11-05T22:36:02.320","description":"Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. An attacker capable of intercepting the victim's traffic could read and modify communications, including credentials and personal data.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-295"],"vendors":[],"products":[],"references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tpc-softwares-matchpoint","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}