CVE-2026-126802

NextScan versions 1.1.0 through 1.2.0 are vulnerable to unauthorized API access due to hardcoded HTTP Basic Auth credentials within the ns-admin AuthAgent and AuthExternal routers. Unauthenticated attackers can exploit this to access the /agent/config endpoint, potentially obtaining Redis passwor...

EUVD-2026-124017

NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in ns-admin's AuthAgent and AuthExternal routers that allow unauthenticated attackers to access protected APIs. Attackers can call /agent/config to obtain Redis passwords, etcd details and the server token, and impersonat...

EUVD-2026-124013

NextScan 1.1.0 through 1.2.0 contains a stored cross-site scripting vulnerability in the ns-admin URL asset detail dialog that renders crawled form request bodies AssetURL.data via innerHTML without encoding. Attackers can host crafted forms on crawled sites to store JavaScript that executes when...

CVE-2026-126798

NextScan versions 1.1.0 through 1.2.0 are vulnerable to a stored cross-site scripting (XSS) flaw in the ns-admin URL asset detail dialog . The vulnerability occurs because the application renders crawled form request bodies (Asset_URL.data) using innerHTML without proper encoding. An attacker can...

EUVD-2026-124012

NextScan 1.1.0 through 1.2.0 contains an authentication bypass vulnerability in ns-admin that allows unauthenticated attackers to forge administrator tokens using a hardcoded JWT signing key. Attackers can sign an HS256 X-Access-Token carrying the public super administrator role ID to gain full...

CVE-2026-126797

NextScan versions 1.1.0 through 1.2.0 are vulnerable to an authentication bypass in the ns-admin component. The root cause is the use of a hardcoded JWT signing key (CWE-321), which allows unauthenticated attackers to forge an HS256 X-Access-Token . By carrying the public super administrator role...