{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3anextscan1_1_0_through_1_2_0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:nextscan:1_1_0_through_1_2_0:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.2,"id":"CVE-2026-126802"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["NextScan 1.1.0 through 1.2.0"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["NextScan"],"content_html":"\u003cp\u003eNextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in ns-admin's AuthAgent and AuthExternal routers. This vulnerability allows unauthenticated attackers to access protected APIs.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAttackers can call /agent/config to obtain Redis passwords, etcd details, and the server token. Additionally, attackers can impersonate scan nodes via registration, heartbeat, and logging endpoints.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eReview documentation for security updates or mitigations provided by the vendor regarding the hardcoded credentials in these versions.\u003c/p\u003e\n","date_modified":"2026-11-12T02:09:00Z","date_published":"2026-11-12T02:09:00Z","id":"https://feed.craftedsignal.io/briefs/2026-11-nextscan-hardcoded-credentials-cve-2026-126802/","summary":"NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in the AuthAgent and AuthExternal components, allowing unauthenticated access to APIs and sensitive configuration data.","title":"NextScan: Hardcoded HTTP Basic Auth credentials (CVE-2026-126802)","url":"https://feed.craftedsignal.io/briefs/2026-11-nextscan-hardcoded-credentials-cve-2026-126802/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:nextscan:1_1_0_through_1_2_0:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}