tongcheng-security-team
NextScan 1.1.0 through 1.2.0 contains an authentication bypass vulnerability in ns-admin that allows unauthenticated attackers to forge administrator tokens…
Not on CISA's list of exploited flaws, and not in the news we track.
CVE-2026-126797Critical9.3
Chance of exploitation in the next 30 days
0.61%
EPSS score from FIRST
Reading the vendor advisory
Black Shard's team can check your exposure to CVE-2026-126797 and take the fix off your plate.
NextScan 1.1.0 through 1.2.0 contains an authentication bypass vulnerability in ns-admin that allows unauthenticated attackers to forge administrator tokens using a hardcoded JWT signing key. Attackers can sign an HS256 X-Access-Token carrying the public super administrator role ID to gain full access to user management, scan tasks and stored vulnerability results.
Updated 13 Nov 2026, 12:04 UTC, 31 of 36 sources answering.
Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.