Authentication Bypass Vulnerability in NextScan by Tongcheng Security Team

CVE-2026-126797

What is CVE-2026-126797?

NextScan versions 1.1.0 and 1.2.0 are vulnerable to an authentication bypass flaw in the ns-admin component. This issue allows unauthenticated attackers to exploit a hardcoded JSON Web Token (JWT) signing key, enabling them to forge administrator tokens. By creating a malicious HS256 X-Access-Token with the public super administrator role ID, attackers can gain unauthorized full access to critical functionalities, including user management, scan tasks, and stored vulnerability results. It is crucial for users of these versions to implement the recommended patches and secure their systems.

References