Ghostwire

CVE-2026-114220: NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated...

CRITICAL CVSS 9.1 Exploit Available

Published: October 22, 2026 | Last Modified: October 22, 2026

Description

NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between the application and the server.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References