Question 1

What is CVE-2026-111489 — CVE-2026-111489?

Accepted Answer

A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform. The report states that this token grants unauthenticated access to API services.

Question 2

What is the authoritative source for CVE-2026-111489?

Accepted Answer

CVE-2026-111489 (CVE-2026-111489) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-111489CVE-2026-111489

Description

Scoring