Vendor
NextScan versions 1.1.0 through 1.2.0 contain an authentication bypass vulnerability via a hardcoded JWT signing key, allowing unauthenticated attackers to forge administrative tokens.