NextScan - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/nextscan/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 22:07:39 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNextScan: Authentication bypass in ns-admin (CVE-2026-126797)https://feed.craftedsignal.io/briefs/2026-11-nextscan-auth-bypass-cve-2026-126797/Wed, 11 Nov 2026 22:07:39 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-nextscan-auth-bypass-cve-2026-126797/NextScan versions 1.1.0 through 1.2.0 contain an authentication bypass vulnerability via a hardcoded JWT signing key, allowing unauthenticated attackers to forge administrative tokens.NextScan versions 1.1.0 through 1.2.0 are vulnerable to an authentication bypass in the ns-admin component. The vulnerability arises from the use of a hardcoded JWT signing key, which allows an unauthenticated attacker to forge HS256-signed X-Access-Token values. By embedding the public super administrator role ID in the forged token, an attacker can gain full access to user management, scan tasks, and sensitive vulnerability data stored within the system.

Impact

Successful exploitation allows an unauthenticated attacker to bypass authentication, assume super administrator privileges, and gain unauthorized access to all administrative functions and data managed by the NextScan instance.

Recommendation

Inventory all instances of NextScan within your environment. Currently, no patch information is available; restrict network access to the management interface (ns-admin) to trusted IP ranges only until the vendor provides a remediation or update.

]]>criticaladvisory