MEDIUMCVSS v4 5.1Vulnerability
CVE-2026-111495
API keys, credentials, and configuration parameters embedded in the MatchPoint APK, which can be extracted through reverse engineering. The vendor distinguishes the extracted elements from Google Maps and Firebase keys that must remain on the client side and considers them project identifiers, not authentication secrets. The impact depends on the capabilities and restrictions of each exposed element.
Properties
- Cvss score
- 5.1
- First seen
- 2026-11-05T21:59:47+00:00
- Last seen
- 2026-11-05T21:59:47+00:00
- Euvd assigner
- INCIBE
- Retrieved at
- 2026-11-06T07:34:21+00:00
- Src batch id
- euvd-20261106T073401Z-826fba
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117822
- Score
- 5.1
- Euvd base score version
- 4.0
- Fetched at
- 2026-11-06T07:34:21+00:00
- Euvd vendor
- TPC Software
- Cvss vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- First seen by Signal
- 2026-11-06T01:34:22+00:00
- Euvd base score
- 5.1
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Content hash
- bde0f3143f4c1285518b6a3755e97b0497bea543ff0c9ad1e2ceb77723057d35
- Published at
- 2026-11-05T22:17:44.353
- Last modified
- 2026-11-05T22:36:02.320
- Euvd updated
- 2026-11-05T21:59:47+00:00
- Euvd epss pct
- 0
Explore deeper with Ninja Signal's threat intelligence graph