Hardcoded Credentials in NextScan Affects API Security
CVE-2026-126802

8.8HIGH

Key Information:

Vendor: Tongcheng-security-team
Status: Nextscan
Vendor: CVE Published:; 11 November 2026

🔔 Create Tongcheng-security-team Vulnerability Alert

What is CVE-2026-126802?

NextScan versions 1.1.0 through 1.2.0 are affected by a serious security issue where hardcoded HTTP Basic Auth credentials are present in both the AuthAgent and AuthExternal routers of ns-admin. This vulnerability allows unauthenticated attackers to exploit protected APIs. By accessing the /agent/config endpoint, attackers can retrieve sensitive information such as Redis passwords and etcd configurations. Furthermore, the attackers can impersonate scan nodes through the registration, heartbeat, and logging APIs, potentially leading to severe security breaches.