Skip to content
OpenAdvisories

Product · tongcheng-security-team

NextScan

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-126802

    NextScan 1.1.0 through 1.2.0 Hardcoded Credentials in ns-admin Agent and External APIs

    NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in ns-admin's AuthAgent and AuthExternal routers that allow unauthenticated attackers to access protected APIs. Attackers can call /agent/config to obtain Redis passwords, etcd detail…

    tongcheng-security-team NextScan