Live › vulnerability › CVE-2026-114220
Go to dashboardNT OneAPP versions up to 1.5.22 do not validate the server certificate or hostname, so the app accepts a fake server. An attacker on the same network path can read and change the traffic between the app and its server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| NT OneAPP | vendor | <= 1.5.22 | 1.5.35 |
1.5.22 or earlier is affectedUpdate NT OneAPP to version 1.5.35 or later.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between the application and the server.
This page as .md · .json · in your agent: get_signal("CVE-2026-114220")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.