CVE-2026-114222
NewType Infortech｜NT OneAPP - Authentication Bypass
- Published
- Oct 22, 2026
- Last modified
- Oct 22, 2026
- Status
- published
- Known exploitation
- Not listed in CISA KEV
Summary
NT OneAPP allows unauthenticated local attackers to bypass its PIN lock protection through a Deep Link vulnerability, giving them access to sensitive data and features of a logged-in user's account.
Summarized by anthropic/claude-haiku-4.5. Verify details against the original sources.
Read the original description
NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user.
Affected versions
- NewType Infortech NT OneAPP
through 1.5.22