NewType Infortech｜NT OneAPP - Improper Certificate Validation
- Published
- Oct 22, 2026
- Last modified
- Oct 22, 2026
- Status
- published
- Known exploitation
- Not listed in CISA KEV
Summary
NT OneAPP fails to properly validate server certificates and hostnames, allowing attackers on the network to intercept or modify communications between the application and its servers through man-in-the-middle attacks. This vulnerability enables unauthenticated attackers positioned between users and servers to eavesdrop on or tamper with data transmitted by the application.
Summarized by anthropic/claude-haiku-4.5. Verify details against the original sources.
Read the original description
NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between the application and the server.
Affected versions
- NewType Infortech NT OneAPP
through 1.5.22