The version of AHV installed on the remote host is prior to 10.3.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1.3 advisory.

  - A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the     ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values     where OpenSSL uses 0 to indicate failure and libssh uses 0 for successthe function may mistakenly return     a success status even when key derivation fails. This results in uninitialized cryptographic key buffers     being used in subsequent communication, potentially compromising SSH sessions' confidentiality, integrity,     and availability. (CVE-2025-5372)

  - A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk     encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large     amount of metadata to an encrypted device. The utility fails to correctly validate the available space,     causing the metadata to overwrite and corrupt the user's encrypted data. This action leads to a permanent     loss of the stored information. Devices using the LUKS formats other than LUKS1 are not affected by this     issue. (CVE-2025-11568)

  - libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small     document that is submitted for parsing. (CVE-2025-59375)

  - Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker     to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0     through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1     through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. (CVE-2025-40778)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1.3)

high Nessus Plugin ID 299385

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Aug 13, 2026, 8:40 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608132040
Version 1.2 Jul 15, 2026, 11:41 PM CVSS metrics ("Cvssv4 supplemental" set to none) Detection (updated detection logic) Plugin metadata Plugin Feed: 202607152341
Version 1.1 Feb 18, 2026, 4:02 PM New Plugin Feed: 202602181602