Is CVE-2026-114223 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-114223 being exploited in the wild.

How severe is CVE-2026-114223?

Medium severity, with a CVSS score of 5.5, published 22 October 2026.

Is there a fix for CVE-2026-114223?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-114223 attacked?

It is attacked with local access, in a software library.

Am I affected by CVE-2026-114223?

Check whether you run NewType Infortech OneAPP. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-114223: NT OneAPP sensitive information exposure in backup data

CVE-2026-114223 · Severity: medium · CVSS 5.5 · Published 2026-10-22

NT OneAPP is a mobile application platform that may store sensitive user credentials. An attacker with local access to a device and ADB (Android Debug Bridge) authorization can extract plaintext usernames and passwords from backup data, potentially leading to unauthorized account access and data compromise.

Vendors: NewType Infortech.

Quick answers

Is CVE-2026-114223 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-114223 being exploited in the wild.
How severe is CVE-2026-114223?: Medium severity, with a CVSS score of 5.5, published 22 October 2026.
Which products and versions are affected?: NewType Infortech OneAPP.
Is there a fix for CVE-2026-114223?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-114223 attacked?: It is attacked with local access, in a software library.
Am I affected by CVE-2026-114223?: Check whether you run NewType Infortech OneAPP. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is an exposure of sensitive information flaw in NT OneAPP's backup mechanism. Unauthenticated local attackers can extract plaintext credentials from backup data after obtaining ADB access and user backup confirmation. The attack requires local device access and ADB authorization but no authentication to the application itself.

Affected products

NewType Infortech OneAPP

Timeline

2026-10-22: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.