CVE-2026-5944

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5944", "assignerOrgId": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "state": "PUBLISHED", "assignerShortName": "Nutanix", "dateReserved": "2026-04-09T05:40:22.214Z", "datePublished": "2026-04-28T13:06:35.686Z", "dateUpdated": "2026-04-28T14:14:58.850Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "shortName": "Nutanix", "dateUpdated": "2026-04-28T13:06:35.686Z"}, "title": "Cisco Intersight Device Connector for Nutanix Prism Central Unauthenticated API Access", "datePublic": "2026-04-28T13:06:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-306", "description": "CWE-306 Missing authentication for critical function", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "affected": [{"vendor": "Nutanix", "product": "Cisco Intersight Device Connector for Prism Central", "versions": [{"status": "affected", "version": "4.3.0", "lessThan": "7.5.1", "changes": [{"at": "7.5.1", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:nutanix:cisco_intersight_device_connector_for_prism_central:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.3.0", "versionEndExcluding": "7.5.1"}]}]}], "descriptions": [{"lang": "en", "value": "An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication.\n\n\n\nAn unauthenticated attacker with network access can exploit this vulnerability by sending crafted requests to the exposed endpoint to enumerate cluster metadata, including virtual machine information and cluster configuration details. While the API primarily supports read-only operations, it also allows certain cluster maintenance workflows to be invoked.\n\n\n\nAlthough this vulnerability does not allow persistent modification of system configurations or access to credentials or sensitive user data, successful exploitation may result in disruption of active workloads, leading to loss of service availability within the affected environment.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication.</p><p>An unauthenticated attacker with network access can exploit this vulnerability by sending crafted requests to the exposed endpoint to enumerate cluster metadata, including virtual machine information and cluster configuration details. While the API primarily supports read-only operations, it also allows certain cluster maintenance workflows to be invoked.</p><p>Although this vulnerability does not allow persistent modification of system configurations or access to credentials or sensitive user data, successful exploitation may result in disruption of active workloads, leading to loss of service availability within the affected environment.</p>"}]}], "tags": ["x_api-security", "x_unauthenticated-access", "x_cisco-intersight-device-connector", "x_prism-central", "x_port-7373"], "references": [{"url": "https://download.nutanix.com/alerts/Security_Advisory_0046.pdf", "tags": ["vendor-advisory"]}, {"url": "https://portal.nutanix.com/page/documents/list?type=software&filterKey=software&filterVal=Prism", "tags": ["release-notes"]}, {"url": "https://www.nutanix.com/support", "tags": ["x_support"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NEGLIGIBLE", "Automatable": "NO", "Recovery": "USER", "valueDensity": "CONCENTRATED", "vulnerabilityResponseEffort": "LOW", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6.7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/S:N/AU:N/R:U/V:C/RE:L/U:Amber"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.2, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV2_0": {"version": "2.0", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 8.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:C"}}, {"other": {"type": "ssvc", "content": {"options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CNA", "version": "2.0.3"}}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "configurations": [{"lang": "en", "value": "The vulnerability is exploitable only when the Cisco Intersight Device Connector has been manually installed via the Prism Central Marketplace. If the connector is not enabled, the affected service and TCP port 7373 remain closed and unexposed.\nOrganizations are impacted only when the connector is active and running a version greater than or equal to 4.3.0 and less than 7.5.1, which can be verified by navigating to the Admin Center in Prism Central, selecting the My Apps tab and verifying the installation status and version of the Cisco Intersight Device Connector.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>The vulnerability is exploitable only when the Cisco Intersight Device Connector has been manually installed via the Prism Central Marketplace. If the connector is not enabled, the affected service and TCP port 7373 remain closed and unexposed.</p><p>Organizations are impacted only when the connector is active and running a version greater than or equal to 4.3.0 and less than 7.5.1, which can be verified by navigating to the Admin Center in Prism Central, selecting the My Apps tab and verifying the installation status and version of the Cisco Intersight Device Connector.</p>"}]}], "workarounds": [{"lang": "en", "value": "If upgrading the Cisco Intersight Device Connector to version 7.5.1 or later is not immediately possible, restrict access to TCP port 7373 by limiting the service to internal traffic only:\n * Establish an SSH session to Prism Central (PC).\n * Execute the following command to reconfigure the service visibility to internal traffic only: sudo kubectl -n pc-platform-other annotate service cisco-device-connector service.msp.ntnx.io/lb=pc-internal --overwrite\n * Run the following command: sudo kubectl get svc -n pc-platform-other and verify that the Cisco Intersight Device Connector is no longer associated with the Prism Central public IP address.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>If upgrading the Cisco Intersight Device Connector to version 7.5.1 or later is not immediately possible, restrict access to TCP port 7373 by limiting the service to internal traffic only:</p><ul><li>Establish an SSH session to Prism Central (PC).</li><li>Execute the following command to reconfigure the service visibility to internal traffic only: <code>sudo kubectl -n pc-platform-other annotate service cisco-device-connector service.msp.ntnx.io/lb=pc-internal --overwrite</code></li><li>Run the following command: <code>sudo kubectl get svc -n pc-platform-other</code> and verify that the Cisco Intersight Device Connector is no longer associated with the Prism Central public IP address.</li></ul>"}]}], "solutions": [{"lang": "en", "value": "Nutanix has released version 7.5.1 of the Cisco Intersight Device Connector:\n * Log in to Prism Central (PC) and navigate to the Life Cycle Manager (LCM) Dashboard.\n * Click \"Perform Inventory\" or \"Get Full Inventory\" to refresh the inventory.\n * After the inventory refresh completes, navigate to the Marketplace.\n * Select the Cisco Intersight Device Connector.\n * Click \"Upgrade\" to update to version 7.5.1 or later.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Nutanix has released version 7.5.1 of the Cisco Intersight Device Connector:</p><ul><li>Log in to Prism Central (PC) and navigate to the Life Cycle Manager (LCM) Dashboard.</li><li>Click \"Perform Inventory\" or \"Get Full Inventory\" to refresh the inventory.</li><li>After the inventory refresh completes, navigate to the Marketplace.</li><li>Select the Cisco Intersight Device Connector.</li><li>Click \"Upgrade\" to update to version 7.5.1 or later.</li></ul>"}]}], "exploits": [{"lang": "en", "value": "The Nutanix Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>The Nutanix Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.</p>"}]}], "timeline": [{"time": "2026-04-08T15:45:00.000Z", "lang": "en", "value": "Initial vulnerability analysis and internal update"}, {"time": "2026-04-08T18:30:00.000Z", "lang": "en", "value": "CVE reserved"}, {"time": "2026-04-28T13:06:00.000Z", "lang": "en", "value": "Advisory published"}], "credits": [{"lang": "en", "value": "External Security Researcher (via Cisco)", "type": "reporter"}], "source": {"advisory": "nutanix-sa-0046", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-28T14:14:48.970984Z", "id": "CVE-2026-5944", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-28T14:14:58.850Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5944", "assignerOrgId": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "state": "PUBLISHED", "assignerShortName": "Nutanix", "dateReserved": "2026-04-09T05:40:22.214Z", "datePublished": "2026-04-28T13:06:35.686Z", "dateUpdated": "2026-04-28T14:14:58.850Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "shortName": "Nutanix", "dateUpdated": "2026-04-28T13:06:35.686Z"}, "title": "Cisco Intersight Device Connector for Nutanix Prism Central Unauthenticated API Access", "datePublic": "2026-04-28T13:06:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-306", "description": "CWE-306 Missing authentication for critical function", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "affected": [{"vendor": "Nutanix", "product": "Cisco Intersight Device Connector for Prism Central", "versions": [{"status": "affected", "version": "4.3.0", "lessThan": "7.5.1", "changes": [{"at": "7.5.1", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:nutanix:cisco_intersight_device_connector_for_prism_central:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.3.0", "versionEndExcluding": "7.5.1"}]}]}], "descriptions": [{"lang": "en", "value": "An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication.\n\n\n\nAn unauthenticated attacker with network access can exploit this vulnerability by sending crafted requests to the exposed endpoint to enumerate cluster metadata, including virtual machine information and cluster configuration details. While the API primarily supports read-only operations, it also allows certain cluster maintenance workflows to be invoked.\n\n\n\nAlthough this vulnerability does not allow persistent modification of system configurations or access to credentials or sensitive user data, successful exploitation may result in disruption of active workloads, leading to loss of service availability within the affected environment.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication.</p><p>An unauthenticated attacker with network access can exploit this vulnerability by sending crafted requests to the exposed endpoint to enumerate cluster metadata, including virtual machine information and cluster configuration details. While the API primarily supports read-only operations, it also allows certain cluster maintenance workflows to be invoked.</p><p>Although this vulnerability does not allow persistent modification of system configurations or access to credentials or sensitive user data, successful exploitation may result in disruption of active workloads, leading to loss of service availability within the affected environment.</p>"}]}], "tags": ["x_api-security", "x_unauthenticated-access", "x_cisco-intersight-device-connector", "x_prism-central", "x_port-7373"], "references": [{"url": "https://download.nutanix.com/alerts/Security_Advisory_0046.pdf", "tags": ["vendor-advisory"]}, {"url": "https://portal.nutanix.com/page/documents/list?type=software&filterKey=software&filterVal=Prism", "tags": ["release-notes"]}, {"url": "https://www.nutanix.com/support", "tags": ["x_support"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NEGLIGIBLE", "Automatable": "NO", "Recovery": "USER", "valueDensity": "CONCENTRATED", "vulnerabilityResponseEffort": "LOW", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6.7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/S:N/AU:N/R:U/V:C/RE:L/U:Amber"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.2, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV2_0": {"version": "2.0", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 8.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:C"}}, {"other": {"type": "ssvc", "content": {"options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CNA", "version": "2.0.3"}}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "configurations": [{"lang": "en", "value": "The vulnerability is exploitable only when the Cisco Intersight Device Connector has been manually installed via the Prism Central Marketplace. If the connector is not enabled, the affected service and TCP port 7373 remain closed and unexposed.\nOrganizations are impacted only when the connector is active and running a version greater than or equal to 4.3.0 and less than 7.5.1, which can be verified by navigating to the Admin Center in Prism Central, selecting the My Apps tab and verifying the installation status and version of the Cisco Intersight Device Connector.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>The vulnerability is exploitable only when the Cisco Intersight Device Connector has been manually installed via the Prism Central Marketplace. If the connector is not enabled, the affected service and TCP port 7373 remain closed and unexposed.</p><p>Organizations are impacted only when the connector is active and running a version greater than or equal to 4.3.0 and less than 7.5.1, which can be verified by navigating to the Admin Center in Prism Central, selecting the My Apps tab and verifying the installation status and version of the Cisco Intersight Device Connector.</p>"}]}], "workarounds": [{"lang": "en", "value": "If upgrading the Cisco Intersight Device Connector to version 7.5.1 or later is not immediately possible, restrict access to TCP port 7373 by limiting the service to internal traffic only:\n * Establish an SSH session to Prism Central (PC).\n * Execute the following command to reconfigure the service visibility to internal traffic only: sudo kubectl -n pc-platform-other annotate service cisco-device-connector service.msp.ntnx.io/lb=pc-internal --overwrite\n * Run the following command: sudo kubectl get svc -n pc-platform-other and verify that the Cisco Intersight Device Connector is no longer associated with the Prism Central public IP address.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>If upgrading the Cisco Intersight Device Connector to version 7.5.1 or later is not immediately possible, restrict access to TCP port 7373 by limiting the service to internal traffic only:</p><ul><li>Establish an SSH session to Prism Central (PC).</li><li>Execute the following command to reconfigure the service visibility to internal traffic only: <code>sudo kubectl -n pc-platform-other annotate service cisco-device-connector service.msp.ntnx.io/lb=pc-internal --overwrite</code></li><li>Run the following command: <code>sudo kubectl get svc -n pc-platform-other</code> and verify that the Cisco Intersight Device Connector is no longer associated with the Prism Central public IP address.</li></ul>"}]}], "solutions": [{"lang": "en", "value": "Nutanix has released version 7.5.1 of the Cisco Intersight Device Connector:\n * Log in to Prism Central (PC) and navigate to the Life Cycle Manager (LCM) Dashboard.\n * Click \"Perform Inventory\" or \"Get Full Inventory\" to refresh the inventory.\n * After the inventory refresh completes, navigate to the Marketplace.\n * Select the Cisco Intersight Device Connector.\n * Click \"Upgrade\" to update to version 7.5.1 or later.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Nutanix has released version 7.5.1 of the Cisco Intersight Device Connector:</p><ul><li>Log in to Prism Central (PC) and navigate to the Life Cycle Manager (LCM) Dashboard.</li><li>Click \"Perform Inventory\" or \"Get Full Inventory\" to refresh the inventory.</li><li>After the inventory refresh completes, navigate to the Marketplace.</li><li>Select the Cisco Intersight Device Connector.</li><li>Click \"Upgrade\" to update to version 7.5.1 or later.</li></ul>"}]}], "exploits": [{"lang": "en", "value": "The Nutanix Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>The Nutanix Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.</p>"}]}], "timeline": [{"time": "2026-04-08T15:45:00.000Z", "lang": "en", "value": "Initial vulnerability analysis and internal update"}, {"time": "2026-04-08T18:30:00.000Z", "lang": "en", "value": "CVE reserved"}, {"time": "2026-04-28T13:06:00.000Z", "lang": "en", "value": "Advisory published"}], "credits": [{"lang": "en", "value": "External Security Researcher (via Cisco)", "type": "reporter"}], "source": {"advisory": "nutanix-sa-0046", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-5944", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-28T14:14:48.970984Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-28T14:14:53.135Z"}}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Cisco Intersight Device Connector for Prism Central", "vendor": "Nutanix", "versions": [{"changes": [{"at": "7.5.1", "status": "unaffected"}], "lessThan": "7.5.1", "status": "affected", "version": "4.3.0", "versionType": "custom"}]}], "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:intersight_device_connector:*:*:*:*:*:*:*:*", "matchCriteriaId": "B8DF903A-BC2C-432E-BC3C-FF339EDF16D6", "versionEndIncluding": "7.5.0", "versionStartIncluding": "4.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication.\n\n\n\nAn unauthenticated attacker with network access can exploit this vulnerability by sending crafted requests to the exposed endpoint to enumerate cluster metadata, including virtual machine information and cluster configuration details. While the API primarily supports read-only operations, it also allows certain cluster maintenance workflows to be invoked.\n\n\n\nAlthough this vulnerability does not allow persistent modification of system configurations or access to credentials or sensitive user data, successful exploitation may result in disruption of active workloads, leading to loss of service availability within the affected environment."}, {"lang": "es", "value": "Existe una vulnerabilidad de control de acceso inadecuado en el Cisco Intersight Device Connector para Nutanix Prism Central. El servicio expone un endpoint de passthrough de API en el puerto TCP 7373 que es accesible dentro del alcance de red del entorno de despliegue sin autenticaci\u00f3n.\n\nUn atacante no autenticado con acceso a la red puede explotar esta vulnerabilidad enviando solicitudes manipuladas al endpoint expuesto para enumerar metadatos del cl\u00faster, incluyendo informaci\u00f3n de la m\u00e1quina virtual y detalles de configuraci\u00f3n del cl\u00faster. Si bien la API soporta principalmente operaciones de solo lectura, tambi\u00e9n permite invocar ciertos flujos de trabajo de mantenimiento del cl\u00faster.\n\nAunque esta vulnerabilidad no permite la modificaci\u00f3n persistente de las configuraciones del sistema o el acceso a credenciales o datos de usuario sensibles, la explotaci\u00f3n exitosa puede resultar en la interrupci\u00f3n de cargas de trabajo activas, lo que lleva a la p\u00e9rdida de disponibilidad del servicio dentro del entorno afectado."}], "id": "CVE-2026-5944", "lastModified": "2026-10-26T22:10:00.163", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 8.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 7.8, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.2, "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NO", "Recovery": "USER", "Safety": "NEGLIGIBLE", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "CONCENTRATED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:C/RE:L/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "LOW"}, "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "type": "Secondary"}], "ssvcV203": [{"source": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "ssvcData": {"options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CNA", "version": "2.0.3"}}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-5944", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-28T14:14:48.970984Z", "version": "2.0.3"}}]}, "published": "2026-04-28T14:16:13.853", "references": [{"source": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "tags": ["Third Party Advisory"], "url": "https://download.nutanix.com/alerts/Security_Advisory_0046.pdf"}, {"source": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "tags": ["Product", "Third Party Advisory"], "url": "https://portal.nutanix.com/page/documents/list?type=software&filterKey=software&filterVal=Prism"}, {"source": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "tags": ["Product", "Third Party Advisory"], "url": "https://www.nutanix.com/support"}], "sourceIdentifier": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}, {"lang": "en", "value": "CWE-862"}], "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.3.0,7.5.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Cisco Intersight Device Connector for Prism Central", "source": "cna", "vendor": "Nutanix"}, "product": "cisco_intersight_device_connector_for_prism_central", "vendor": "nutanix"}], "created": "2026-04-28T19:30:27.374849+00:00", "updated": "2026-04-29T10:10:46.672614+00:00", "vendors": ["nutanix", "nutanix$PRODUCT$cisco_intersight_device_connector_for_prism_central"]}