Hard-coded Credentials Vulnerability in NT OneAPP by NewType Infortech
CVE-2026-114219

9.1CRITICAL

Key Information:

Vendor

Newtype Infortech

Status
Nt Oneapp
Vendor
CVE Published:
22 October 2026

What is CVE-2026-114219?

The NT OneAPP, developed by NewType Infortech, contains a significant security flaw due to hard-coded credentials. This vulnerability allows unauthenticated remote attackers to access a cryptographic key embedded within the application. By exploiting this weakness, attackers can decrypt login request contents, potentially exposing sensitive user information including plaintext account credentials and device details. This scenario poses a critical risk to user security and data integrity.

Affected Version(s)

NT OneAPP 0 <= 1.5.22

References

https://www.twcert.org.tw/en/cp-139-11299-0cbfd-2.html
https://www.twcert.org.tw/tw/cp-132-11298-d9dd5-1.html

CVSS V4

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.