CVE-2026-114220: NewType Infortech｜NT OneAPP - Improper Certificate Validation
NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between the application and the server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
NT OneAPPto a version that resolves this vulnerability.Fixed in 1.5.35
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker in a network-adjacent position can exploit it. The attacker must be able to intercept traffic between NT OneAPP and its server, such as by occupying a man-in-the-middle position.
What can an attacker do if exploitation succeeds?
The attacker can intercept or modify communications between the application and the server. The reported impact includes exposure and alteration of transmitted data.