Serial Number: AV26-900Date: September 9, 2026 As of September 8, 2026, NVIDIA is affected by vulnerabilities in the following product: Triton Inference Server Versions 0.0 to 26.03 Versions 0.0 to 26.06 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Bulletin: Triton Inference Server - September 2026 NVIDIA Product Security
NVIDIA CA
A newly disclosed Rowhammer attack called GPUThor can bypass error-correcting code (ECC) protections on NVIDIA GPUs, enabling denial-of-service (DoS) and root-level privilege escalation. [...]
NVIDIA US
Serial Number: AV26-849Date: August 26, 2026 As of August 25, 2026, NVIDIA is affected by vulnerabilities in the following product: NVIDIA NemoClaw and OpenShell Multiple versions NVIDIA Unified Fabric Manager Multiple versions and models NVIDIA DGX Spark Versions prior to 1.110.13 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Bulletin: NVIDIA NemoClaw and OpenShell - August 2026 Security…
NVIDIA CA
Aggiornamenti di sicurezza NVIDIA risolvono 28 vulnerabilità, di cui 2 con gravità "critica" e 17 con gravità "alta", che interessano i prodotti NemoClaw, OpenShell, Unified Fabric Manager (UFM) Enterprise e DGX Spark. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di eseguire codice arbitrario, elevare i propri privilegi, alterare i dati, accedere a informazioni sensibili e compromettere la disponibilità dei sistemi interessati.
NVIDIA IT
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24272.
EPSS 0.00 CVSS 7.8 CVE-2026-24272 NVIDIA US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24238.
EPSS 0.00 CVSS 7.8 CVE-2026-24238 NVIDIA US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24268.
EPSS 0.00 CVSS 7.8 CVE-2026-24268 NVIDIA US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24251.
EPSS 0.00 CVSS 7.8 CVE-2026-24251 NVIDIA US
Serial Number: AV26-830Date: August 19, 2026 As of August 18, 2026, NVIDIA is affected by vulnerabilities in the following products: Triton Inference Server Versions prior to 0.0-26.05 Cumulus Linux GA/LTS Multiple versions NVOS Versions prior to 25.0.2.4438 and 25.0.2.6077 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. product-security/2026/5865 at main · NVIDIA/product-security · GitHub Security…
NVIDIA CA
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24232.
EPSS 0.00 CVSS 7.8 CVE-2026-24232 NVIDIA US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NeMo Framework. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24228.
EPSS 0.00 CVSS 7.8 CVE-2026-24228 NVIDIA US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NVTabular. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24237.
EPSS 0.00 CVSS 7.8 CVE-2026-24237 NVIDIA US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NeMo Framework. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24157.
EPSS 0.01 CVSS 7.8 CVE-2026-24157 NVIDIA US
Welcome to Day One of Pwn2Own Berlin 2026! Today, 22 entries took the Pwn2Own stage to target AI Databases, Coding Agents, Local Inferences, and a separate category for NVIDIA products, as the world’s top security researchers push technology to its limits. Exploits, surprises, and breakthrough discoveries are unfolding.After Day One, we awarded $523,000 for 24 unique 0-days! DEVCORE is currently in the lead for Master of Pwn, but a pack of teams are right on their heels. Stay tuned tomorrow for…
Learn how TrendAI and NVIDIA OpenShell help secure autonomous AI agents and build trusted enterprise AI systems with stronger visibility and control.