GHSA-f233-77rj-r72pHighCVSS 8.2
NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in ns-admin's...
🔗 CVE IDs covered (1)
📋 Description
NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in ns-admin's AuthAgent and AuthExternal routers that allow unauthenticated attackers to access protected APIs. Attackers can call /agent/config to obtain Redis passwords, etcd details and the server token, and impersonate scan nodes via registration, heartbeat and logging endpoints.
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2026-126802
- https://github.com/tongcheng-security-team/NextScan/issues/50
- https://hub.docker.com/r/lysec/ns-admin
- https://vul.yulun.ac.cn/20261107/nextscan
- https://www.vulncheck.com/advisories/nextscan-1.1.0-through-1.2.0-hardcoded-credentials-in-ns-admin-agent-and-external-apis
- https://github.com/advisories/GHSA-f233-77rj-r72p