NVIDIA vulnerabilities
Published CVEs affecting NVIDIA products: 436 record(s), with severity, exploitation and fixes.
GeForce 120Tesla 119NVIDIA RTX, Quadro, NVS 116Virtual GPU Manager 67Guest driver 63Megatron-Bridge 43Nemo Megatron Bridge 43Triton Inference Server 36Nemo 21NeMo Framework 21DGX Spark 20Tensorrt Llm 16Dynamo 15Dgx Os 15Nemoclaw 14Infra Controller 14Infrastructure Controller 14Gpu Display Driver 12Megatron-lm 10AIStore framework 9DALI 7Openshell 6Tensorrt 6Unified Fabric Manager Enterprise - LTS 2023 5Unified Fabric Manager Enterprise - LTS 2024 5Unified Fabric Manager Enterprise - LTS 2025 5Nemo Speech 5Dgx Spark Uefi 5Cumulus Linux GA 5Unified Fabric Manager Enterprise - GA 5Cumulus Linux 5Cumulus Linux LTS 4RTX PRO, RTX, Quadro 4Nvos 4ConnectX LTS24 4BlueField GA 4Bionemo Framework 4Cuda Toolkit 4BlueField LTS23 4BlueField LTS24 4
CVE-2026-65113
Critical · 9.8
CWE-798 Sep 22, 2026
Use of Hard-coded Credentials in NVIDIA Infra Controller
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure.
CVE-2026-65112
Medium · 6.5
CWE-400 Sep 22, 2026
Uncontrolled Resource Consumption in NVIDIA Infra Controller
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-65111
High · 7.8
CWE-77 Sep 22, 2026
Command Injection in NVIDIA Nemo Speech
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.
CVE-2026-24267
High · 7.8
CWE-502 Sep 22, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Speech
NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24239
High · 7.8
CWE-502 Sep 22, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Speech
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.
CVE-2026-47625
High · 7.5
CWE-862 Sep 8, 2026
Missing Authorization in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.
CVE-2026-16497
High · 7.5
CWE-834 Sep 8, 2026
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker…
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-61779
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61778
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61777
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61776
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61775
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61774
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61773
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61772
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61771
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61770
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61769
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61768
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61767
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61766
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61765
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61764
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61763
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-61762
High · 7.8
CWE-502 Sep 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.