This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24250.
EPSS 0.00 CVSS 7.8 CVE-2026-24250 NVIDIA US
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-65180, CVE-2026-65173, CVE-2026-65172, CVE-2026-65170, CVE-2026-65164, CVE-2026-65162, CVE-2026-65161, CVE-2026-65131, CVE-2026-65110, CVE-2026-65104, CVE-2026-65103, CVE-2026-65101, CVE-2026-67456, CVE-2026-65150, CVE-2026-65149, CVE-2026-65148, CVE-2026-65147, CVE-2026-65141, Summary: CVE-2026-65180 7.8 - NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an…
EPSS 0.01 CVSS 10.0 a dalších 1 CVE-2026-65103 CVE-2026-65104 CVE-2026-65110 CVE-2026-65131 CVE-2026-65141 CVE-2026-65147 CVE-2026-65148 CVE-2026-65149 CVE-2026-65150 CVE-2026-65161 CVE-2026-65162 CVE-2026-65164 CVE-2026-65170 CVE-2026-65172 CVE-2026-65173 CVE-2026-65180 CVE-2026-67456 NVIDIA FI
Aggiornamenti di sicurezza risolvono 114 vulnerabilità, di cui 78 con gravità "alta", che interessano i driver GPU e il software vGPU di NVIDIA.
NVIDIA IT
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9, CVEs: CVE-2026-47489, CVE-2026-47491, CVE-2026-47494, CVE-2026-47500, CVE-2026-47501, CVE-2026-47502, CVE-2026-47504, CVE-2026-47505, CVE-2026-47507, CVE-2026-47508, CVE-2026-47510, CVE-2026-47511, CVE-2026-47512, CVE-2026-47513, CVE-2026-47514, CVE-2026-47516, CVE-2026-47523, CVE-2026-47528, CVE-2026-47530, CVE-2026-47540 (+96 other associated CVEs), Summary: NVIDIA has released a software update…
CVSS 9.9 NVIDIA FI
Serial number: AV26-957Date: September 23, 2026 As of September 22, 2026, NVIDIA is affected by vulnerabilities in the following products: Infrastructure Controller Versions 0 to 1.9 NeMo Speech Versions 0.0 to 2.9 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Bulletin: NVIDIA Infrastructure Controller - September 2026 Security Bulletin: NVIDIA NeMo Speech - September 2026 NVIDIA Product…
NVIDIA CA
Serial Number: AV26-900Date: September 9, 2026 As of September 8, 2026, NVIDIA is affected by vulnerabilities in the following product: Triton Inference Server Versions 0.0 to 26.03 Versions 0.0 to 26.06 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Bulletin: Triton Inference Server - September 2026 NVIDIA Product Security
NVIDIA CA
A newly disclosed Rowhammer attack called GPUThor can bypass error-correcting code (ECC) protections on NVIDIA GPUs, enabling denial-of-service (DoS) and root-level privilege escalation. [...]
NVIDIA US
Serial Number: AV26-849Date: August 26, 2026 As of August 25, 2026, NVIDIA is affected by vulnerabilities in the following product: NVIDIA NemoClaw and OpenShell Multiple versions NVIDIA Unified Fabric Manager Multiple versions and models NVIDIA DGX Spark Versions prior to 1.110.13 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Bulletin: NVIDIA NemoClaw and OpenShell - August 2026 Security…
NVIDIA CA
Aggiornamenti di sicurezza NVIDIA risolvono 28 vulnerabilità, di cui 2 con gravità "critica" e 17 con gravità "alta", che interessano i prodotti NemoClaw, OpenShell, Unified Fabric Manager (UFM) Enterprise e DGX Spark. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di eseguire codice arbitrario, elevare i propri privilegi, alterare i dati, accedere a informazioni sensibili e compromettere la disponibilità dei sistemi interessati.
EPSS 0.03 a dalších 2 CVE-2026-24262 CVE-2026-24263 CVE-2026-47626 CVE-2026-65081 CVE-2026-65082 CVE-2026-65083 CVE-2026-65084 CVE-2026-65089 CVE-2026-65090 CVE-2026-65091 CVE-2026-65092 CVE-2026-65093 CVE-2026-65096 CVE-2026-65097 CVE-2026-65098 CVE-2026-65099 CVE-2026-65105 NVIDIA IT
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24272.
EPSS 0.00 CVSS 7.8 CVE-2026-24272 NVIDIA US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24238.
EPSS 0.00 CVSS 7.8 CVE-2026-24238 NVIDIA US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24268.
EPSS 0.00 CVSS 7.8 CVE-2026-24268 NVIDIA US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24251.
EPSS 0.00 CVSS 7.8 CVE-2026-24251 NVIDIA US
Serial Number: AV26-830Date: August 19, 2026 As of August 18, 2026, NVIDIA is affected by vulnerabilities in the following products: Triton Inference Server Versions prior to 0.0-26.05 Cumulus Linux GA/LTS Multiple versions NVOS Versions prior to 25.0.2.4438 and 25.0.2.6077 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. product-security/2026/5865 at main · NVIDIA/product-security · GitHub Security…
NVIDIA CA
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24232.
EPSS 0.00 CVSS 7.8 CVE-2026-24232 NVIDIA US
TrendAI joins Nvidia as an inaugural partner in the Open Secure AI Alliance, advancing open models, harnesses, and research to strengthen cyber defense.
NVIDIA JP
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NeMo Framework. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24228.
EPSS 0.00 CVSS 7.8 CVE-2026-24228 NVIDIA US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NVTabular. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24237.
EPSS 0.00 CVSS 7.8 CVE-2026-24237 NVIDIA US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NeMo Framework. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24157.
EPSS 0.01 CVSS 7.8 CVE-2026-24157 NVIDIA US
Welcome to Day One of Pwn2Own Berlin 2026! Today, 22 entries took the Pwn2Own stage to target AI Databases, Coding Agents, Local Inferences, and a separate category for NVIDIA products, as the world’s top security researchers push technology to its limits. Exploits, surprises, and breakthrough discoveries are unfolding.After Day One, we awarded $523,000 for 24 unique 0-days! DEVCORE is currently in the lead for Master of Pwn, but a pack of teams are right on their heels. Stay tuned tomorrow for…
Learn how TrendAI and NVIDIA OpenShell help secure autonomous AI agents and build trusted enterprise AI systems with stronger visibility and control.