https://feed.craftedsignal.io/vendors/newtype-infortech/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 22 Oct 2026 06:00:27 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-10-nt-oneapp-mitm/Thu, 22 Oct 2026 06:00:27 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-nt-oneapp-mitm/NT OneAPP fails to validate server certificates and hostnames, allowing network-adjacent attackers to conduct man-in-the-middle attacks.<p>NT OneAPP, developed by NewType Infortech, contains an Improper Certificate Validation vulnerability (CVE-2026-114220). The application fails to validate the server certificate and the hostname. Consequently, unauthenticated network-adjacent attackers can perform a man-in-the-middle attack to intercept or modify communications between the application and the server.</p> criticaladvisorycredential-accessvulnerabilitycve-2026-114219