Vulnerabilidades de NVIDIA

CVE-2026-65093 Crítica · 9.9 CWE-427 25/08/2026

Uncontrolled Search Path Element em NVIDIA Openshell

NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

CVE-2026-65092 Alta · 8.5 CWE-22 25/08/2026

Path Traversal em NVIDIA Openshell

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering.

CVE-2026-65091 Alta · 8.8 CWE-78 25/08/2026

OS Command Injection em NVIDIA Openshell

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

CVE-2026-65090 Alta · 7.8 CWE-78 25/08/2026

OS Command Injection em NVIDIA Nemoclaw

NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.

CVE-2026-65089 Alta · 7.8 CWE-78 25/08/2026

OS Command Injection em NVIDIA Nemoclaw

NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.

CVE-2026-65088 Média · 5.5 CWE-214 25/08/2026

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of…

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might lead to information disclosure.

CVE-2026-65087 Média · 6.1 CWE-522 25/08/2026

Insufficiently Protected Credentials em NVIDIA Nemoclaw

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering.

CVE-2026-65086 Média · 6.8 CWE-78 25/08/2026

OS Command Injection em NVIDIA Openshell

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.

CVE-2026-65085 Média · 5.2 CWE-116 25/08/2026

Improper Encoding or Escaping of Output em NVIDIA Openshell

NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper encoding or escaping of output. A successful exploit of this vulnerability might lead to information disclosure and data tampering.

CVE-2026-65084 Crítica · 9.8 CWE-295 25/08/2026

Improper Certificate Validation em NVIDIA Nemoclaw

NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, code execution, and escalation of privileges.

CVE-2026-65083 Crítica · 9.9 CWE-184 25/08/2026

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API…

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.

CVE-2026-65082 Alta · 7.8 CWE-94 25/08/2026

Code Injection em NVIDIA Nemoclaw

NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.

CVE-2026-65081 Crítica · 9.8 CWE-494 25/08/2026

Download of Code Without Integrity Check em NVIDIA Nemoclaw

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of service.

CVE-2026-47626 Alta · 8.2 CWE-787 25/08/2026

Out-of-bounds Write em NVIDIA Dgx Spark Uefi

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-47624 Média · 6.0 CWE-693 25/08/2026

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an…

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi.

CVE-2026-24263 Alta · 8.2 CWE-476 25/08/2026

NULL Pointer Dereference em NVIDIA Dgx Spark Uefi

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-24262 Alta · 8.2 CWE-787 25/08/2026

Out-of-bounds Write em NVIDIA Dgx Spark Uefi

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-24225 Média · 6.0 CWE-125 25/08/2026

Out-of-bounds Read em NVIDIA Dgx Spark Uefi

NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure.

CVE-2026-47630 Média · 5.5 CWE-36 18/08/2026

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker…

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution.

CVE-2026-47629 Alta · 7.5 CWE-20 18/08/2026

Improper Input Validation em NVIDIA Triton Inference Server

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service.

CVE-2026-47628 Alta · 7.5 CWE-770 18/08/2026

Allocation of Resources Without Limits or Throttling em NVIDIA Triton Inference Server

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. A successful exploit might lead to denial of service.

CVE-2026-47627 Crítica · 9.8 CWE-22 18/08/2026

Path Traversal em NVIDIA Triton Inference Server

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service.

CVE-2026-47606 Crítica · 9.1 CWE-36 18/08/2026

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker…

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure.

CVE-2026-24184 Alta · 8.8 CWE-120 18/08/2026

Classic Buffer Overflow em NVIDIA Cumulus Linux

NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution.

CVE-2026-24183 Alta · 7.8 CWE-250 18/08/2026

Execution with Unnecessary Privileges em NVIDIA Cumulus Linux

NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges.