CVE-2026-114223 NewType Infortech CVE debrief

Who should care

Defenders responsible for NT OneAPP deployments, particularly those with access to backup data, should assess exposure and prioritize remediation. This includes operators, administrators, and security teams responsible for managing NT OneAPP instances, as well as those responsible for monitoring and incident response.

Why it matters

CVE-2026-114223 is a medium-severity vulnerability in NT OneAPP that allows unauthenticated local attackers to extract sensitive information from backup data. Defenders should prioritize verifying and remediating affected instances, reviewing backup data access controls, and assessing exposure.

• Sensitive information disclosure to unauthorized parties
• Potential for lateral movement within the network
• Need for verification of NT OneAPP versions and configurations
• Requirement for review of backup data access controls

Technical summary

The NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Unauthenticated local attackers can extract plaintext usernames and passwords from backup data after obtaining ADB backup access authorization and user confirmation of the backup. This vulnerability is a result of inadequate access controls on backup data, allowing unauthorized access to sensitive information. Defenders should prioritize verifying and remediating NT OneAPP versions 1.5.22 or earlier, and review backup data access controls.

Defensive priority

Defenders should prioritize verifying and remediating NT OneAPP versions 1.5.22 or earlier, and review backup data access controls.

Recommended defensive actions

• Verify NT OneAPP version and configuration
• Review backup data access controls
• Remediate vulnerable NT OneAPP instances
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and source item provide details on the vulnerability, but affected versions and remediation steps require further verification from official sources. The source item and CVE record indicate that the vulnerability exists in NT OneAPP, but additional information is needed to fully understand the scope of the vulnerability and to develop effective mitigations. Official sources should be consulted for accurate and up-to-date information.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.