CRITICALCVSS v4 9.9Vulnerability
CVE-2026-111489
A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform. The report states that this token grants unauthenticated access to API services.
Properties
- Severity
- CRITICAL
- Nvd fetched at
- 2026-11-06T06:16:30.423848+00:00
- Cvss score
- 9.9
- Cvss severity
- CRITICAL
- Retrieved at
- 2026-11-06T06:17:09+00:00
- Score
- 9.9
- Last source
- NVD
- Cvss version
- 4.0
- Cve id
- CVE-2026-111489
- Cvss vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- First seen by Signal
- 2026-11-06T02:11:21+00:00
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Published at
- 2026-11-05T22:17:43.447
- Last modified
- 2026-11-05T22:36:02.320
Explore deeper with Ninja Signal's threat intelligence graph