[ CVE-2026-114221 · Published 22 Oct 2026 ]
Vulnerability in NewType Infortech NT OneAPP
CVSS 7.4
EPSS <1%No fix listed yet
[ Description ]Official description
NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated remote attackers can trigger an HTTP Basic Authentication challenge from an unvalidated source in the WebView under specific conditions, thereby obtaining the NUP Portal passcode of a logged-in user.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.