Dashboard / CVE-2026-114223

CVE-2026-114223

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 38/100
Published: 2026-10-22 Modified: 2026-10-22 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Active
S: X
AT: None
VC: High
VI: None
VA: None

Description

NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Unauthenticated local attackers can extract plaintext usernames and passwords from backup data after obtaining ADB backup access authorization and user confirmation of the backup, resulting in sensitive information disclosure.

Weakness Classification (1)

References & Advisories (2)

Bug Bounty Relevance

38 / 100
✓ No authentication
✓ Low complexity

CVSS Score

6.7 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.08%
Raw Score 0.000840
Percentile 0.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00084
2026-10-28
0.00084

Intelligence Sources

nvd ref →

External Links