Cpe:2.3:a:nextscan:nextscan:*:*:*:*:*:*:*:*

NextScan versions 1.1.0 through 1.2.0 contain an authentication bypass vulnerability via a hardcoded JWT signing key, allowing unauthenticated attackers to forge administrative tokens.