Authentication Bypass Vulnerability in NT OneAPP by NewType Infortech
CVE-2026-114222

6.9MEDIUM

Key Information:

Vendor: Newtype Infortech
Status: Nt Oneapp
Vendor: CVE Published:; 22 October 2026

🔔 Create Newtype Infortech Vulnerability Alert

What is CVE-2026-114222?

The NT OneAPP, developed by NewType Infortech, contains an authentication bypass vulnerability. Through exploiting deep link functionalities, unauthenticated attackers can effectively circumvent the App PIN lock. This allows unauthorized access to sensitive resources belonging to authenticated users, posing a significant security risk.

Affected Version(s)

NT OneAPP 0 <= 1.5.22

References

https://www.twcert.org.tw/en/cp-139-11299-0cbfd-2.html

https://www.twcert.org.tw/tw/cp-132-11298-d9dd5-1.html

CVSS V4

Score:

6.9

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 22, 2026
Vulnerability Reserved
Oct 21, 2026

CVE-2026-114222 Data

JSON