NewType Infortech vulnerabilities
We track 4 vulnerabilities in NewType Infortech products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.
Latest NewType Infortech vulnerabilities
- 7.4 High severity
NT OneAPP: Insufficiently Protected Credentials
NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated remote attackers can trigger an HTTP Basic Authentication challenge from an unvalidated source in the WebView under specific conditions, thereby obtaining the N
- 9.1 Critical severity
NT OneAPP: Improper Certificate Validation
NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby interceptin
- 7.4 High severity
NT OneAPP: Use of Hard-coded Credentials
NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decrypt login request contents, thereby obtaining users' plaintext account credentials and dev
- 9.8 Critical severity
NUP Portal: Improper Neutralization of Special Elements used in an SQL Command
NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.