{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/nextscan/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:nextscan:nextscan:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-126797"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["NextScan (1.1.0 through 1.2.0)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["NextScan"],"content_html":"\u003cp\u003eNextScan versions 1.1.0 through 1.2.0 are vulnerable to an authentication bypass in the ns-admin component. The vulnerability arises from the use of a hardcoded JWT signing key, which allows an unauthenticated attacker to forge HS256-signed X-Access-Token values. By embedding the public super administrator role ID in the forged token, an attacker can gain full access to user management, scan tasks, and sensitive vulnerability data stored within the system.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unauthenticated attacker to bypass authentication, assume super administrator privileges, and gain unauthorized access to all administrative functions and data managed by the NextScan instance.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eInventory all instances of NextScan within your environment. Currently, no patch information is available; restrict network access to the management interface (ns-admin) to trusted IP ranges only until the vendor provides a remediation or update.\u003c/p\u003e\n","date_modified":"2026-11-11T22:07:39Z","date_published":"2026-11-11T22:07:39Z","id":"https://feed.craftedsignal.io/briefs/2026-11-nextscan-auth-bypass-cve-2026-126797/","summary":"NextScan versions 1.1.0 through 1.2.0 contain an authentication bypass vulnerability via a hardcoded JWT signing key, allowing unauthenticated attackers to forge administrative tokens.","title":"NextScan: Authentication bypass in ns-admin (CVE-2026-126797)","url":"https://feed.craftedsignal.io/briefs/2026-11-nextscan-auth-bypass-cve-2026-126797/"}],"language":"en","title":"CraftedSignal Threat Feed - NextScan","version":"https://jsonfeed.org/version/1.1"}