CVE Intelligence

NVIDIA vulnerabilities

🔔 Create alert RSS

Published CVEs affecting NVIDIA products: 436 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-24259 Medium · 6.4 CWE-306 Jul 14, 2026
Missing Authentication for Critical Function in NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-24238 High · 7.8 CWE-129 Jul 14, 2026
NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper…
NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution.
CVE-2026-24234 Medium · 6.8 CWE-918 Jul 14, 2026
Server-Side Request Forgery (SSRF) in NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
CVE-2026-24233 High · 8.4 CWE-502 Jul 14, 2026
Deserialization of Untrusted Data in NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24229 High · 7.3 CWE-306 Jul 14, 2026
Missing Authentication for Critical Function in NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.
CVE-2026-24227 Critical · 9.8 CWE-502 Jul 14, 2026
Deserialization of Untrusted Data in NVIDIA Tensorrt
NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution.
CVE-2026-24226 Medium · 6.3 CWE-829 Jul 14, 2026
NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause…
NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-24220 Medium · 6.4 CWE-502 Jul 14, 2026
Deserialization of Untrusted Data in NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution.
CVE-2026-47482 High · 7.5 CWE-401 Jul 14, 2026
Missing Release of Memory after Effective Lifetime in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47481 Medium · 6.5 CWE-288 Jul 14, 2026
Authentication Bypass Using an Alternate Path or Channel in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-47480 High · 7.5 CWE-248 Jul 14, 2026
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can…
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47479 High · 7.5 CWE-400 Jul 14, 2026
Uncontrolled Resource Consumption in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47478 High · 7.5 CWE-910 Jul 14, 2026
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can…
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47477 High · 7.5 CWE-121 Jul 14, 2026
Stack-based Buffer Overflow in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47476 High · 7.5 CWE-400 Jul 14, 2026
Uncontrolled Resource Consumption in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24270 Critical · 9.8 CWE-290 Jul 1, 2026
Authentication Bypass by Spoofing in NVIDIA AIStore framework
NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24266 High · 7.5 CWE-416 Jul 1, 2026
Use After Free in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24264 High · 7.5 CWE-409 Jul 1, 2026
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can…
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highly compressed data. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24260 High · 8.5 CWE-367 Jul 1, 2026
TOCTOU Race Condition in NVIDIA Container Toolkit
NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and data tampering.
CVE-2026-24251 High · 7.8 CWE-502 Jul 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24250 High · 7.8 CWE-502 Jul 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24249 High · 7.8 CWE-94 Jul 1, 2026
Code Injection in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24248 High · 7.8 CWE-94 Jul 1, 2026
Code Injection in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24247 High · 7.8 CWE-502 Jul 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24246 High · 7.8 CWE-470 Jul 1, 2026
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause…
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.