CVE-2026-114220Critical· 9.1▾ MidnightNT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostna…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 50.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between the application and the server.
nt_oneapp <= 1.5.22Update to NT OneAPP version 1.5.35 or later
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114222Medium· 6.2NewType Infortech｜NT OneAPP - Authentication Bypass
CVE-2026-114219High· 7.4NewType Infortech｜NT OneAPP - Hard-coded Credentials
CVE-2026-114223Medium· 5.5NewType Infortech｜NT OneAPP - Exposure of Sensitive Information
CVE-2026-114221High· 7.4NewType Infortech｜NT OneAPP - Credential Disclosure
CVE-2025-14022High· 7.7LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK
CVE-2021-20327Medium· 6.4A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate