Sensitive Information Exposure in NT OneAPP by NewType Infortech
CVE-2026-114223

6.7MEDIUM

Key Information:

Vendor

Newtype Infortech

Status
Nt Oneapp
Vendor
CVE Published:
22 October 2026

What is CVE-2026-114223?

The vulnerability in NT OneAPP, developed by NewType Infortech, allows unauthenticated local attackers to exploit ADB backup access authorization. After gaining user consent for backup operations, malicious entities can extract sensitive plaintext usernames and passwords from the application's backup data. This potential information disclosure poses significant risks, enabling attackers to access user accounts and sensitive data.

Affected Version(s)

NT OneAPP 0 <= 1.5.22

References

https://www.twcert.org.tw/en/cp-139-11299-0cbfd-2.html
https://www.twcert.org.tw/tw/cp-132-11298-d9dd5-1.html

CVSS V4

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.