CRITICALCVSS v3.1 9.1Vulnerability
CVE-2026-114220
NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between the application and the server.
Properties
- Epss score
- 0.00158
- First seen
- 2026-10-22T04:26:20+00:00
- Cvss score
- 9.1
- Last seen
- 2026-10-22T04:26:20+00:00
- Euvd assigner
- twcert
- Retrieved at
- 2026-10-22T22:17:33+00:00
- Src batch id
- euvd-20261022T063401Z-a7bd24
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108003
- Score
- 9.1
- Euvd base score version
- 4.0
- Fetched at
- 2026-10-22T06:34:20+00:00
- Euvd vendor
- NewType Infortech
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- First seen by Signal
- 2026-10-22T06:03:26+00:00
- Euvd base score
- 9.3
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Content hash
- f583e6b644dcfcf20df1d470958487f9d5a5f62b937b3657b231ec7317da7cc0
- Published at
- 2026-10-22T05:16:50.020
- Euvd updated
- 2026-10-22T04:26:20+00:00
- Last modified
- 2026-10-22T19:17:37.153
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph