Nutanix vulnerabilities
We track 3 vulnerabilities in Nutanix products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
Latest Nutanix vulnerabilities
- 9.8 Critical severity
Acropolis Operating System (AOS): Authentication Bypass by Spoofing
An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the applicat
- 8.2 High severity
Cisco Intersight Device Connector for Prism…: Missing Authentication for Critical Functionality
An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment witho
- 9.3 Critical severity
Prism Central: Improper Neutralization of Input During Web Page Generation
Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context.