NVIDIA Unified Fabric Manager Enterprise - GA vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting NVIDIA Unified Fabric Manager Enterprise - GA: 5 record(s), with affected versions and fixes.
CVE-2026-24170
High · 8.8
CWE-287 Aug 25, 2026
Improper Authentication in NVIDIA Unified Fabric Manager Enterprise - GA
NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.
CVE-2026-24169
High · 8.0
CWE-77 Aug 25, 2026
Command Injection in NVIDIA Unified Fabric Manager Enterprise - GA
NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and information disclosure.
CVE-2026-24168
Medium · 6.8
CWE-77 Aug 25, 2026
Command Injection in NVIDIA Unified Fabric Manager Enterprise - GA
NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause command injection by sending crafted API requests. A successful exploit of this vulnerability may lead to code execution, escalation of privileges and information disclosure.
CVE-2026-24167
Medium · 6.8
CWE-77 Aug 25, 2026
Command Injection in NVIDIA Unified Fabric Manager Enterprise - GA
NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands by sending a crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and information disclosure.
CVE-2026-24166
Medium · 5.1
CWE-321 Aug 25, 2026
NVIDIA UFM Enterprise contains a vulnerability in the session management component…
NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic key to extract information. A successful exploit of this vulnerability might lead to information disclosure and escalation of privileges.