CVE-2026-114220

Summary

The NT OneAPP application fails to validate server certificates and hostnames, allowing unauthenticated, network-adjacent attackers to perform man-in-the-middle attacks and intercept or modify traffic.

Exploitability

Exploitation requires network adjacency and no authentication; it is straightforward for an attacker in position to intercept traffic between the app and server.

Blast radius

Attackers can steal sensitive data, tamper with commands or responses, and potentially escalate to full system compromise depending on the application’s functionality.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to NT OneAPP version 2.590 or later, where certificate and hostname validation has been properly implemented.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.