CVE-2026-114221
CVE-2026-114221 · NewType Infortech｜NT OneAPP - Credential Disclosure
This page contains facts from public vulnerability sources. Check the original advisory before updating.
NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated remote attackers can trigger an HTTP Basic Authentication challenge from an unvalidated source in the WebView under specific conditions, thereby obtaining the NUP Portal passcode of a logged-in user.
CVSS 5.9 · Medium · EPSS 0.3%
- Published
- Updated
Affected products and versions
nt oneapp
- Versions
- ≥ 0, ≤ 1.5.22: Affected (custom)
No fix published