{"id":"CVE-2026-114223","kind":"vulnerability","aliases":["CVE-2026-114223"],"related":[],"title":"NT OneAPP: plaintext usernames and passwords exposed in Android backup data","description":"NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Unauthenticated local attackers can extract plaintext usernames and passwords from backup data after obtaining ADB backup access authorization and user confirmation of the backup, resulting in sensitive information disclosure.","summary":"NT OneAPP by NewType Infortech stores usernames and passwords in plaintext inside its backup data. A local attacker who gets ADB backup access and a user confirmation of the backup can read those credentials.","severity":"medium","cvss":6.7,"epss":0.00084,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","mobile-app","other"],"not_affected_if":["adb-backup-disabled"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-22T05:16:50+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","triaged_at":"2026-10-25T03:45:22+00:00","updated_at":"2026-10-25T03:45:22+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-25T03:45:22Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"NT OneAPP: plaintext usernames and passwords exposed in Android backup data","impact":"medium","summary":"NT OneAPP by NewType Infortech stores usernames and passwords in plaintext inside its backup data. A local attacker who gets ADB backup access and a user confirmation of the backup can read those credentials.","category":"other","nicknames":[],"who_cares":["android","mobile-app"],"confidence":0.5,"needs_auth":"no","worst_case":"Plaintext usernames and passwords readable from app backup data","analyst_note":"Check the NVD entry for affected NT OneAPP versions and the vendor's fixed release; the sources here give neither.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["adb-backup-disabled"],"who_is_affected":"unknown","user_interaction":"yes","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000507,"input_tokens":3361,"output_tokens":341,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-114223':14A,17A '-2026':13A,16A 'access':44B,85C 'adb':42B,83C 'android':9A,18B 'app':21B 'attack':39B,71C 'author':86C 'backup':10A,35B,43B,51B,79C,84C,92C 'confirm':48B,89C 'credenti':55B 'cve':12A,15A 'data':11A,36B,80C 'develop':58C 'disclosur':97C 'expos':7A 'exposur':64C 'extract':73C 'get':41B 'inform':67C,96C 'infortech':26B,61C 'insid':33B 'local':38B,70C 'mobil':20B 'mobile-app':19B 'newtyp':25B,60C 'nt':1A,22B,56C 'obtain':82C 'oneapp':2A,23B,57C 'password':6A,30B,77C 'plaintext':3A,32B,74C 'read':53B 'result':93C 'sensit':66C,95C 'store':27B 'unauthent':69C 'user':47B,88C 'usernam':4A,28B,75C 'vulner':68C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T05:16:50+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"twcert@cert.org.tw","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114223","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114223","severity":null,"published_at":"2026-10-22T05:16:50+00:00","modified_at":"2026-10-22T15:31:24+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-114223","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114223","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}