CVE-2026-114219High· 7.4▾ TwilightNT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decrypt login request contents, thereby obtaining users' plaintext acco…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decrypt login request contents, thereby obtaining users' plaintext account credentials and device information.
nt_oneapp <= 1.5.22Update to NT OneAPP version 1.5.35 or later
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114220Critical· 9.1NewType Infortech｜NT OneAPP - Improper Certificate Validation
CVE-2026-114222Medium· 6.2NewType Infortech｜NT OneAPP - Authentication Bypass
CVE-2026-114223Medium· 5.5NewType Infortech｜NT OneAPP - Exposure of Sensitive Information
CVE-2026-114221High· 7.4NewType Infortech｜NT OneAPP - Credential Disclosure
CVE-2019-6693Medium· 6.5Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key
CVE-2024-23687Critical· 9.1Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate f…