CVE-2026-111491: Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences
Published Nov 5, 2026
·Updated
Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences. An attacker with access to the device's local data or a backup could retrieve usernames and passwords and use them to gain unauthorized access to accounts on the platform.
Event History
Nov 5, 2026
CVE Published
via MITRE·09:51 PM
Data Sourced
via MITRE·09:51 PM
RemedyDescriptionWeakness