CVE-2026-5944

An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication. An unauthenticated attacker with network access can exploit this vulnerability by sending crafted requests to the exposed endpoint to enumerate cluster metadata, including virtual machine information and cluster configuration details. While the API primarily supports read-only operations, it also allows certain cluster maintenance workflows to be invoked. Although this vulnerability does not allow persistent modification of system configurations or access to credentials or sensitive user data, successful exploitation may result in disruption of active workloads, leading to loss of service availability within the affected environment.

• CWE-306
• CWE-862

• https://download.nutanix.com/alerts/Security_Advisory_0046.pdfThird Party Advisory
• https://portal.nutanix.com/page/documents/list?type=software&filterKey=software&filterVal=PrismProduct, Third Party Advisory
• https://www.nutanix.com/supportProduct, Third Party Advisory

Published

Apr 28, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5938Improper control flow management allows a crafted document a…5.5
• CVE-2026-5939A crafted XFA PDF can trigger a use-after-free condition dur…5.5
• CVE-2026-5940Calling a function that triggers a UI refresh after removing…5.5
• CVE-2026-5941Parsing logic flaws cause non-signature data to be misidenti…7.1
• CVE-2026-5942Flaws in page lifecycle management allow document structure …5.5
• CVE-2026-5943Document structural anomalies caused inconsistencies between…7.8
• CVE-2026-5946Multiple flaws have been identified in `named` related to th…7.5
• CVE-2026-5947Undefined behavior may result due to a race condition leadin…5.9
• CVE-2026-5950An unbounded resend loop vulnerability exists in the BIND 9 …5.3
• CVE-2026-59509An unauthenticated improper input validation vulnerability i…9.2
• CVE-2026-59510AIL Framework contains a path traversal vulnerability in its…7.1
• CVE-2026-59511Insertion of Sensitive Information Into Sent Data vulnerabil…5.3