Vulnerabilidades em TPC Software
7 resultadosAnálise Vexday
A TPC Software tem 7 CVEs na base do Vexday, 3 classificadas como críticas pelo CVSS, e nenhuma consta no catálogo KEV, portanto não há registro de exploração ativa. A fraqueza dominante é a CWE-256 (armazenamento de senha em texto claro), e as 7 vulnerabilidades foram publicadas nos últimos 90 dias, o que indica que o panorama de risco é recente.
CVE-2026-111493HIGHLack of authentication and authorization in the Images.ashx endpoint in MatchPointEPSS 0.5%CVE-2026-111490CRITICALInsecure direct object reference (IDOR) vulnerability in the MatchPoint APIEPSS 0.4%CVE-2026-111489CRITICALA static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platformEPSS 0.3%CVE-2026-111494CRITICALIncorrect validation of TLS certificates in the MatchPoint Android appEPSS 0.2%CVE-2026-111492HIGHSQL injection in the push notification handler of the MatchPoint Android appEPSS 0.2%CVE-2026-111495MEDIUMAPI keys, credentials, and configuration parameters embedded in the MatchPoint APKEPSS 0.1%CVE-2026-111491MEDIUMCredentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferencesEPSS 0.1%