UpstreamscvelistV5 00:11ZCISA KEV 01:18ZVulnrichment 00:11ZNVD 00:11ZEPSS 01:18Zdaily run 06:05 UTC · next hourly 02:15

Thu 5 Nov 2026

Today

120 new ≥ 9.0 · 11 actionable · TPC Software clear

PriorityVulnerabilityCVSSEPSSSignals

TPC Software3 vulnerabilitiesMax CVSS 9.9Priority 30KEV 0

30

CVE-2026-111489

TPC Software Matchpoint · A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform

9.9–

30

CVE-2026-111490

TPC Software Matchpoint · Insecure direct object reference (IDOR) vulnerability in the MatchPoint API

9.9–

27

CVE-2026-111494

TPC Software Matchpoint · Incorrect validation of TLS certificates in the MatchPoint Android app

9.1–

CVSS ×30KEV +30EPSS ×20exploit +10 · SSVC +10how the score works