CVE-2026-114219: NewType Infortech｜NT OneAPP - Hard-coded Credentials
NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decrypt login request contents, thereby obtaining users' plaintext account credentials and device information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
NewType Infortech NT OneAPPto a version that resolves this vulnerability.Fixed in 1.5.35
Event History
Frequently Asked Questions
Who can exploit this issue?
Unauthenticated remote attackers can exploit it. No account or user interaction is required, although exploitation is rated as having high attack complexity.
What information could be exposed?
An attacker who obtains the hard-coded cryptographic key can decrypt login request contents. This can expose users' plaintext account credentials and device information.
Does exploitation affect data integrity or availability?
The provided severity vector indicates high confidentiality and integrity impact, with no availability impact.