Credential Disclosure Vulnerability in NT OneAPP by NewType Infortech

CVE-2026-114221

What is CVE-2026-114221?

The NT OneAPP, developed by NewType Infortech, is susceptible to a credential disclosure vulnerability that exposes users to potential security breaches. Specifically, unauthenticated remote attackers can exploit this vulnerability to trigger an HTTP Basic Authentication challenge from an unvalidated source within the application's WebView. This manipulation allows attackers to obtain the NUP Portal passcode of logged-in users, potentially compromising sensitive user information. It is critical for users and administrators to be aware of such vulnerabilities and apply the necessary security patches to safeguard their systems.

References