CVE-2026-114222: NewType Infortech｜NT OneAPP - Authentication Bypass
NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
NewType Infortech NT OneAPPto a version that resolves this vulnerability.Fixed in 1.5.35
Event History
Frequently Asked Questions
Who is exposed to this issue?
Devices running NewType Infortech NT OneAPP where a user is already logged in are exposed to unauthenticated local attackers. The issue concerns access to resources protected by the app's PIN lock.
What does an attacker need to exploit it?
An attacker needs local access to the affected device and does not need authentication or user interaction. Exploitation is performed through a Deep Link to bypass the App PIN lock mechanism.