CVE-2026-114219
NewType Infortech｜NT OneAPP - Hard-coded Credentials
- Published
- Oct 22, 2026
- Last modified
- Oct 22, 2026
- Status
- published
- Known exploitation
- Not listed in CISA KEV
Summary
NT OneAPP contains hard-coded credentials that allow unauthenticated attackers to decrypt login requests and obtain users' plaintext account credentials and device information. This vulnerability could enable unauthorized access to user accounts and exposure of sensitive device data.
Summarized by anthropic/claude-haiku-4.5. Verify details against the original sources.
Read the original description
NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decrypt login request contents, thereby obtaining users' plaintext account credentials and device information.
Affected versions
- NewType Infortech NT OneAPP
through 1.5.22