CVE-2026-114223: NewType Infortech｜NT OneAPP - Exposure of Sensitive Information
NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Unauthenticated local attackers can extract plaintext usernames and passwords from backup data after obtaining ADB backup access authorization and user confirmation of the backup, resulting in sensitive information disclosure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
NewType Infortech NT OneAPPto a version that resolves this vulnerability.Fixed in 1.5.35
Event History
Frequently Asked Questions
What access does an attacker need to extract the exposed credentials?
The attacker must have local access to the device and must obtain ADB backup access authorization. The user must also confirm the backup operation.
Does exploitation require an authenticated account in NT OneAPP?
No. The vulnerability is described as exploitable by an unauthenticated local attacker, provided the attacker obtains ADB backup authorization and user confirmation.
What information can be disclosed?
Backup data may contain plaintext usernames and passwords, allowing an attacker to extract those credentials.