Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2026-114223

NewType Infortech｜NT OneAPP - Exposure of Sensitive Information

NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Unauthenticated local attackers can extract plaintext usernames and passwords from backup data after obtaining ADB backup access authorization and user confirmation of the backup, resulting in sensitive information disclosure.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Newtype Infortech
Products
Nt Oneapp
CVE-2026-114222

NewType Infortech｜NT OneAPP - Authentication Bypass

NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Newtype Infortech
Products
Nt Oneapp
CVE-2026-114221

NewType Infortech｜NT OneAPP - Credential Disclosure

NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated remote attackers can trigger an HTTP Basic Authentication challenge from an unvalidated source in the WebView under specific conditions, thereby obtaining the NUP Portal passcode of a logged-in user.

CVSS 4.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Newtype Infortech
Products
Nt Oneapp
CVE-2026-114220

NewType Infortech｜NT OneAPP - Improper Certificate Validation

NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between the application and the server.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Newtype Infortech
Products
Nt Oneapp
CVE-2026-114219

NewType Infortech｜NT OneAPP - Hard-coded Credentials

NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decrypt login request contents, thereby obtaining users' plaintext account credentials and device information.

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Newtype Infortech
Products
Nt Oneapp
CVE-2025-10266

NewType Infortech｜NUP Portal - SQL Injection

NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Newtype Infortech
Products
Nup Portal
CVE-2025-10267

NewType Infortech｜NUP Portal - Missing Authentication

NUP Portal developed by NewType Infortech has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly upload files. If the attacker manages to bypass the file extension restrictions, they could upload a webshell and execute it on the server side.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Newtype Infortech
Products
Nup Portal