Version vulnerabilities
Nimbus Gateway 4.2.0 through 4.2.8
Public VAPT disclosures for Nimbus Networks Nimbus Gateway Nimbus Gateway 4.2.0 through 4.2.8, with direct links back into the canonical CVE and case records.
9.4 Critical
Latest disclosure Apr 10, 2026
Disclosure filters
Inspect the public records behind this version.
Public vulnerabilities
Nimbus Networks · Nimbus Gateway · Nimbus Gateway 4.2.0 through 4.2.8
1 public VAPT records in the current version view.
Session bootstrap token bypass in Nimbus Gateway administrative API
Nimbus Gateway accepted stale bootstrap session material on the administrative API, allowing remote attackers to regain privileged access without re-authentication.
CRITICAL
—
Apr 10, 2026