NT OneAPP Vulnerability Allows Unauthenticated MITM Attacks Up to Version 1.5.22
A critical flaw in NewType Infortech software permits attackers to intercept communications by bypassing certificate validation checks.
Key points
- CVE-2026-114220 carries a CVSS score of 9.3, rated critical.
- The flaw affects NT OneAPP versions up to and including 1.5.22.
- Attackers can perform man-in-the-middle attacks without authentication.
NewType Infortech’s NT OneAPP application contains a critical security vulnerability that allows unauthenticated attackers to intercept or modify network communications. The flaw stems from improper validation of server certificates and hostnames, enabling man-in-the-middle attacks against the software.
At a glance
- CVE
- CVE-2026-114220
- Product
- NewType Infortech NT OneAPP
- CVSS
- 9.3 Critical
- Weakness
- CWE-295
- Exploited
- No known exploitation
The National Vulnerability Database lists this issue as CVE-2026-114220 with a CVSS score of 9.3. This high severity rating reflects the ease with which remote attackers can exploit the weakness. The vulnerability is classified under CWE-295, indicating improper certificate validation practices within the application’s codebase.
Context and Background
The vulnerability exists because the application fails to properly validate the server certificate and hostname during communication. This oversight allows network-adjacent attackers to position themselves between the application and the server. Consequently, these attackers can intercept or alter data being transmitted without the user’s knowledge or consent.
According to the NVD record, the attack does not require prior authentication. This means any entity with network access can potentially exploit the flaw. The lack of strict certificate verification undermines the security of the communication channel, exposing sensitive data to interception or modification by malicious actors.
Who Is Affected
The vulnerability impacts all versions of NT OneAPP developed by NewType Infortech up to version 1.5.22. Users running any release prior to or including this version are exposed to the risk. Organizations relying on this software for their operations should verify their current version immediately to determine if they are affected.
The scope of the issue is limited to the specific product line mentioned. No other software from NewType Infortech is cited in the current advisory. However, the critical nature of the flaw means that any deployment of NT OneAPP within the affected version range is at significant risk of compromise.
What should you do?
Security teams should audit their networks to identify any installations of NT OneAPP version 1.5.22 or earlier. Since no patch has been confirmed in the available material, organizations must assess their exposure carefully. Monitoring network traffic for anomalies may help detect potential exploitation attempts while a fix is awaited.
What to do and how to stay safe: NT OneAPP
- Inventory all systems to identify installations of NT OneAPP version 1.5.22 or earlier.
- Monitor network traffic for unusual activity that may indicate man-in-the-middle attacks.
- Isolate affected systems from critical networks until a vendor update is available.
- Review certificate validation settings in other applications to ensure similar flaws are absent.
Step-by-step guide: Risk-Based Vulnerability Management: Prioritize Fixes by Actual Danger
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is the CVSS score for CVE-2026-114220?
The CVSS score for CVE-2026-114220 is 9.3, which is rated as critical.
Which versions of NT OneAPP are affected by this vulnerability?
All versions of NT OneAPP up to and including version 1.5.22 are affected.
How can attackers exploit this vulnerability?
Attackers can perform man-in-the-middle attacks by exploiting the failure to validate server certificates and hostnames.
