---
id: "CVE-2026-114223"
kind: "vulnerability"
aliases: ["CVE-2026-114223"]
title: "NT OneAPP: plaintext usernames and passwords exposed in Android backup data"
severity: "medium"
cvss: 6.7
epss: 0.00084
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["android", "mobile-app", "other"]
not_affected_if: ["adb-backup-disabled"]
published_at: "2026-10-22T05:16:50+00:00"
first_seen_at: "2026-10-23T21:57:30+00:00"
updated_at: "2026-10-25T03:45:22+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114223", "first_seen_at": "2026-10-23T21:57:30+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-114223", "first_seen_at": "2026-10-24T07:15:51+00:00"}]
---

# NT OneAPP: plaintext usernames and passwords exposed in Android backup data

NT OneAPP by NewType Infortech stores usernames and passwords in plaintext inside its backup data. A local attacker who gets ADB backup access and a user confirmation of the backup can read those credentials.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-23T21:57:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114223
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-114223

## From the sources

NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Unauthenticated local attackers can extract plaintext usernames and passwords from backup data after obtaining ADB backup access authorization and user confirmation of the backup, resulting in sensitive information disclosure.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_