CVE-2026-126802

NextScan versions 1.1.0 through 1.2.0 are vulnerable to unauthorized API access due to hardcoded HTTP Basic Auth credentials within the ns-admin AuthAgent and AuthExternal routers. Unauthenticated attackers can exploit this to access the /agent/config endpoint, potentially obtaining Redis passwor...

EUVD-2026-124017

NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in ns-admin's AuthAgent and AuthExternal routers that allow unauthenticated attackers to access protected APIs. Attackers can call /agent/config to obtain Redis passwords, etcd details and the server token, and impersonat...

PT-2023-35795 · Libssh2 · Libssh2

Name of the Vulnerable Software and Affected Versions: libssh2 affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the packet authagent open function and the libssh2 packet add function. The libssh2 ntohu32...

libssh2:ssh2_client_fuzzer: Heap-buffer-overflow in _libssh2_ntohu32

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5232428590694400 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type:...