Medium 6.9

NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability....

CVE-2026-114222 First seen on SecPulse Oct 22, 13:27

Affected packages

Ecosystem	Package	Affected	Fixed
NewType Infortech	NT OneAPP	≤ 1.5.22	—

Original description The description as published by the source.

NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 6.2; CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4: Medium 6.9; CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Published: Oct 22, 2026
First seen on SecPulse: Oct 22, 13:27
GHSA: GHSA-3g57-fjv2-jxx4
CWE: CWE-287

NVD GitHub Advisory

Tags(click for explanation)

Attack Types

Authentication Bypass

CWE

Cwe 287

All

Newtype Infortech Nt Oneapp

Detection sources

NIST National Vulnerability Database00:31
GitHub Security Advisories (Global)Oct 22, 15:31
CVE.org (CVE Program・cvelistV5)Oct 22, 13:27