CVE-2026-111492

A flaw was found in MatchPoint. The application's push notification handler constructs database queries by concatenating untrusted input received from push notification messages, resulting in a SQL Structured Query Language injection vulnerability. An attacker capable of sending crafted messages ...