CVE-2026-84731

An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters...

CVE-2026-84731 Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS

An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters...

CVE-2026-84731

An unauthenticated remote attacker can achieve a pre-authentication admin bypass and Remote Code Execution (RCE) in the Nutanix Prism Gateway inside AOS . The root cause is a misconfiguration in the application's authentication filters, which allows an attacker to include a crafted internal manag...

EUVD-2026-102206

An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters...

CVE-2026-84731 Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS

An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters...

PT-2026-115071

Name of the Vulnerable Software and Affected Versions Nutanix Prism Element versions prior to 7.6.0.8 Nutanix Prism Element versions prior to 7.5.2 Nutanix Prism Element versions prior to 7.3.1.18 Nutanix Prism Central versions prior to 7.6.0.8 Nutanix Prism Central versions prior to 7.5.2 Nutani...

CVE-2026-84731: Missing Authentication for Critical Function

An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters...

Nutanix Acropolis Operating System Authorization Vulnerability

Nutanix Acropolis Operating System versions prior to 7.3.1.18, 7.5 up to 7.5.2, and 7.6 up to 7.6.0.8 have an authorization vulnerability. This vulnerability stems from improper configuration of the authentication filter. Unauthenticated remote attackers can bypass authentication by constructing...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.2.0.2)

The version of AHV installed on the remote host is prior to 11.2.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.2.0.2 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.6.0.6)

The version of AOS installed on the remote host is prior to 7.6.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.6.0.6 advisory. - In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1.14)

The version of AHV installed on the remote host is prior to 10.3.1.14. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1.14 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.16)

The version of AOS installed on the remote host is prior to 7.3.1.16. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.16 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.12)

The version of AOS installed on the remote host is prior to 7.5.1.12. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1.12 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.0.1.8)

The version of AHV installed on the remote host is prior to 11.0.1.8. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.0.1.8 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.0.1.6)

The version of AHV installed on the remote host is prior to 11.0.1.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.0.1.6 advisory. - In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an applicatio...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.10)

The version of AOS installed on the remote host is prior to 7.5.1.10. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1.10 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1.12)

The version of AHV installed on the remote host is prior to 10.3.1.12. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1.12 advisory. - pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.2)

The version of AHV installed on the remote host is prior to 11.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.2 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode....

Nutanix Web Console Login Panel - Detect

Nutanix Web Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nutanix Web Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nutanix Web Console Login Panel...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.6)

The version of AOS installed on the remote host is prior to 7.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.6 advisory. - NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of...