Vulnerability Bulletins |
CVE-2026-111494 |
|
| Affected software | ANDROID |
| Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. An attacker capable of intercepting the victim's traffic could read and modify communications, including credentials and personal data. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-111494 | |