High severity8.2NVD Advisory· Published Nov 11, 2026

CVE-2026-126802

Description

NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in ns-admin's AuthAgent and AuthExternal routers that allow unauthenticated attackers to access protected APIs. Attackers can call /agent/config to obtain Redis passwords, etcd details and the server token, and impersonate scan nodes via registration, heartbeat and logging endpoints.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tongcheng Security Team/Nextscanreferences
NextScan/NextScanllm-create
Range: 1.1.0 - 1.2.0

Patches

Vulnerability mechanics

References

github.com/tongcheng-security-team/NextScan/issues/50nvd
hub.docker.com/r/lysec/ns-adminnvd
vul.yulun.ac.cn/20261107/nextscan/nvd
www.vulncheck.com/advisories/nextscan-1.1.0-through-1.2.0-hardcoded-credentials-in-ns-admin-agent-and-external-apisnvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000