Threats Tagged 'ghsa-w9gq-v5qh-882r'

1 threat

Threats Tagged 'ghsa-w9gq-v5qh-882r'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.9	EPSS 0.3%	CVE-2026-114221NT OneAPP · Insufficiently Protected Credentials Medium5.9EPSS 0.3%2026-10-22CVE Database V5CVE-2026-114221 NT OneAPP by NewType Infortech has a credential disclosure vulnerability (CVE-2026-114221) where unauthenticated remote attackers can trigger an HTTP Basic Authentication challenge from an unvalidated source within the WebView. This can lead to disclosure of the NUP Portal passcode of a logged-in user. The vulnerability affects versions from 0 up to and including 1.5.22. The CVSS 4.0 score is 5.9, indicating a medium severity issue. EPSS 0.3%Vulnerability NewType Infortech #cwe-522 #ghsa-w9gq-v5qh-882r	CVE Database V5	2026-10-22

Showing 1–1 of 1 result