CVE-2026-111489: A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform

Published Nov 5, 2026

Updated

A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform. The report states that this token grants unauthenticated access to API services.

Event History

Nov 5, 2026

CVE Published

via MITRE·09:47 PM

Data Sourced

via MITRE·09:47 PM

RemedyDescription

Frequently Asked Questions

What does an attacker need to exploit this issue?

The report indicates that the attacker needs access to the static credential embedded in the mobile application. That credential can be used to obtain the 'autorizado' token.

What access could the token provide?

The reported 'autorizado' token grants unauthenticated access to API services on the MatchPoint platform.

CVE-2026-111489: A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What access could the token provide?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What access could the token provide?