Cpe:2.3:a:nextscan:1_1_0_through_1_2_0:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3anextscan1_1_0_through_1_2_0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 02:09:00 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNextScan: Hardcoded HTTP Basic Auth credentials (CVE-2026-126802)https://feed.craftedsignal.io/briefs/2026-11-nextscan-hardcoded-credentials-cve-2026-126802/Thu, 12 Nov 2026 02:09:00 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-nextscan-hardcoded-credentials-cve-2026-126802/NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in the AuthAgent and AuthExternal components, allowing unauthenticated access to APIs and sensitive configuration data.NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in ns-admin's AuthAgent and AuthExternal routers. This vulnerability allows unauthenticated attackers to access protected APIs.

Impact

Attackers can call /agent/config to obtain Redis passwords, etcd details, and the server token. Additionally, attackers can impersonate scan nodes via registration, heartbeat, and logging endpoints.

Recommendation

Review documentation for security updates or mitigations provided by the vendor regarding the hardcoded credentials in these versions.

]]>highadvisory