{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Nutanix AOS (Acropolis Operating System) ist eine Infrastruktursoftware, die Storage, Virtualisierung und Netzwerke integriert, um die Verwaltung des Rechenzentrums zu vereinfachen und die Skalierbarkeit zu erhöhen.\r\nNutanix Prism Central ist eine zentralisierte Verwaltungs- und Überwachungsplattform, die eine einheitliche Ansicht und Kontrolle über mehrere Nutanix-Cluster bietet, das Infrastrukturmanagement vereinfacht und einen effizienten Betrieb ermöglicht.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Nutanix AOS und Nutanix Prism Central ausnutzen, um Sicherheitsvorkehrungen zu umgehen und beliebigen Programmcode mit Administratorrechten auszuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- Sonstiges\n- UNIX",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-3991 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3991.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-3991 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3991"
    }, {
      "category" : "external",
      "summary" : "Nutanix Security Advisory vom 2026-10-15",
      "url" : "https://download.nutanix.com/alerts/Security_Advisory_0058.pdf"
    } ],
    "source_lang" : "en-US",
    "title" : "Nutanix AOS und Nutanix Prism Central: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten",
    "tracking" : {
      "current_release_date" : "2026-10-15T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-10-16T10:35:58.378+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-3991",
      "initial_release_date" : "2026-10-15T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-10-15T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<7.6.0.8",
          "product" : {
            "name" : "Nutanix AOS <7.6.0.8",
            "product_id" : "T061297"
          }
        }, {
          "category" : "product_version",
          "name" : "7.6.0.8",
          "product" : {
            "name" : "Nutanix AOS 7.6.0.8",
            "product_id" : "T061297-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:nutanix:aos:7.6.0.8"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.5.2",
          "product" : {
            "name" : "Nutanix AOS <7.5.2",
            "product_id" : "T061298"
          }
        }, {
          "category" : "product_version",
          "name" : "7.5.2",
          "product" : {
            "name" : "Nutanix AOS 7.5.2",
            "product_id" : "T061298-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:nutanix:aos:7.5.2"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.3.1.18",
          "product" : {
            "name" : "Nutanix AOS <7.3.1.18",
            "product_id" : "T061299"
          }
        }, {
          "category" : "product_version",
          "name" : "7.3.1.18",
          "product" : {
            "name" : "Nutanix AOS 7.3.1.18",
            "product_id" : "T061299-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:nutanix:aos:7.3.1.18"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "AOS"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<7.6.0.8",
          "product" : {
            "name" : "Nutanix Prism Central <7.6.0.8",
            "product_id" : "T061300"
          }
        }, {
          "category" : "product_version",
          "name" : "7.6.0.8",
          "product" : {
            "name" : "Nutanix Prism Central 7.6.0.8",
            "product_id" : "T061300-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:nutanix:prism_central:7.6.0.8"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.5.2",
          "product" : {
            "name" : "Nutanix Prism Central <7.5.2",
            "product_id" : "T061301"
          }
        }, {
          "category" : "product_version",
          "name" : "7.5.2",
          "product" : {
            "name" : "Nutanix Prism Central 7.5.2",
            "product_id" : "T061301-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:nutanix:prism_central:7.5.2"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.3.1.18",
          "product" : {
            "name" : "Nutanix Prism Central <7.3.1.18",
            "product_id" : "T061302"
          }
        }, {
          "category" : "product_version",
          "name" : "7.3.1.18",
          "product" : {
            "name" : "Nutanix Prism Central 7.3.1.18",
            "product_id" : "T061302-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:nutanix:prism_central:7.3.1.18"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Prism Central"
      } ],
      "category" : "vendor",
      "name" : "Nutanix"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-84731",
    "product_status" : {
      "known_affected" : [ "T061300", "T061301", "T061302", "T061297", "T061298", "T061299" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-84731"
  } ]
}