CVE-2026-126797

{
  "etk_id": "ETK-2026-4219",
  "cve_id": "CVE-2026-126797",
  "display_id": "CVE-2026-126797",
  "ghsa_id": "GHSA-hfqx-wvcm-v3qr",
  "euvd_id": "EUVD-2026-124012",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Hardcoded JWT key authentication bypass in NextScan",
  "summary": "NextScan 1.1.0 through 1.2.0 exposes ns-admin to authentication bypass because its JWT signing material is embedded in the product. An unauthenticated attacker able to reach that service can impersonate an administrator and access user administration, scan operations, and stored results.",
  "mitigation": "Remove affected ns-admin instances from internet-facing access and restrict them to trusted administrative networks. Until a corrected release is available, use network controls to limit access and review administrative activity for unauthorized changes.",
  "vendor": "tongcheng-security-team",
  "product": "NextScan",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 1.1.0, <= 1.2.0"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "NextScan",
      "purl": null
    }
  ],
  "cwes": [
    321
  ],
  "cvss_score": 9.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 90.56091413333333,
  "t0_at": "2026-11-11T20:53:02.665000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-11T20:53:02.665000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-11T20:53:02.665000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-126797"
    }
  }
}