CPE
NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in the AuthAgent and AuthExternal components, allowing unauthenticated access to APIs and sensitive configuration data.