NewType Infortech has 5 CVEs on record. 5 were published in the last 90 days. The busiest recent month was October 2026 with 5. The median CVSS is 7.4 (high), with 1 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.4
- Publish → KEV
- —
- Last 90 days
- 5 prev 0
Worst active — by depth score
CVE-2026-114220Critical· 9.1NewType Infortech｜NT OneAPP - Improper Certificate Validation50CVE-2026-114221High· 7.4NewType Infortech｜NT OneAPP - Credential Disclosure41CVE-2026-114219High· 7.4NewType Infortech｜NT OneAPP - Hard-coded Credentials41CVE-2026-114222Medium· 6.2NewType Infortech｜NT OneAPP - Authentication Bypass34CVE-2026-114223Medium· 5.5NewType Infortech｜NT OneAPP - Exposure of Sensitive Information30
NewType Infortech vulnerabilities
CVEs affecting NewType Infortech, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-114220Critical· 9.1NewType Infortech｜NT OneAPP - Improper Certificate Validation
NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostna…
CVE-2026-114223Medium· 5.5NewType Infortech｜NT OneAPP - Exposure of Sensitive Information
NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Unauthenticated local attackers can extract plaintext usernames and passwords from backup data after obtaining ADB backup access authorizati…
CVE-2026-114222Medium· 6.2NewType Infortech｜NT OneAPP - Authentication Bypass
NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user.
CVE-2026-114219High· 7.4NewType Infortech｜NT OneAPP - Hard-coded Credentials
NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decrypt login request contents, thereby obtaining users' plaintext acco…
CVE-2026-114221High· 7.4NewType Infortech｜NT OneAPP - Credential Disclosure
NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated remote attackers can trigger an HTTP Basic Authentication challenge from an unvalidated source in the WebView under specific conditions, …