Vulnerability · Published Oct 22, 2026 · Assigned by twcert
CVE-2026-114220NewType Infortech｜NT OneAPP - Improper Certificate Validation
Critical 9.1
In plain English
A critical-severity improper certificate validation in NT OneAPP from NewType Infortech. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.2%top 91.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between the application and the server.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NewType Infortech | NT OneAPP | 0 – through 1.5.22 |
Weakness: CWE-295 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N