Aggregates CVE and security vulnerability intelligence across all NVIDIA-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk buffer overflow and vendor risk memory corruption and related problems; some flaws may lead to vendor impact memory corruption, affecting vendor surface software deployment scenarios.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-24208 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service. | [email protected] | 5.3 | 0.65% | 2026-05-20 | 2026-06-17 |
| CVE-2026-24207 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure. | [email protected] | 9.8 | 0.83% | 2026-05-20 | 2026-06-17 |
| CVE-2026-24206 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation of privileges, denial of service, or information disclosure. | [email protected] | 7.3 | 0.55% | 2026-05-20 | 2026-06-17 |
| CVE-2026-24163 | NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure. | [email protected] | 7.5 | 0.59% | 2026-05-20 | 2026-06-17 |
| CVE-2026-24160 | NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service. | [email protected] | 5.5 | 0.47% | 2026-05-20 | 2026-06-17 |
| CVE-2026-24142 | NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure. | [email protected] | 6.3 | 0.38% | 2026-05-20 | 2026-06-17 |
| CVE-2025-33255 | NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure. | [email protected] | 7.5 | 0.57% | 2026-05-20 | 2026-06-17 |
| CVE-2026-24231 | NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit of this vulnerability may lead to information disclosure. | [email protected] | 6.3 | 0.13% | 2026-04-28 | 2026-06-17 |
| CVE-2026-24222 | NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandbox creation. A successful exploit of this vulnerability might lead to information disclosure. | [email protected] | 8.6 | 0.40% | 2026-04-28 | 2026-06-17 |
| CVE-2026-24204 | NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to information disclosure. | [email protected] | 6.5 | 0.36% | 2026-04-28 | 2026-06-17 |
| CVE-2026-24186 | NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution. | [email protected] | 8.8 | 0.47% | 2026-04-28 | 2026-06-17 |
| CVE-2026-24178 | NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information disclosure, code execution, and denial of service. | [email protected] | 9.8 | 0.57% | 2026-04-28 | 2026-06-17 |
| CVE-2026-24175 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request header to the server. A successful exploit of this vulnerability might lead to denial of service. | [email protected] | 7.5 | 0.47% | 2026-04-07 | 2026-06-17 |
| CVE-2026-24174 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A successful exploit of this vulnerability might lead to denial of service. | [email protected] | 7.5 | 0.52% | 2026-04-07 | 2026-06-17 |
| CVE-2026-24173 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A successful exploit of this vulnerability might lead to denial of service. | [email protected] | 7.5 | 0.52% | 2026-04-07 | 2026-06-17 |
| CVE-2026-24147 | NVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker may cause an information disclosure by uploading a model configuration. A successful exploit of this vulnerability may lead to information disclosure or denial of service. | [email protected] | 4.8 | 0.48% | 2026-04-07 | 2026-06-17 |
| CVE-2026-24146 | NVIDIA Triton Inference Server contains a vulnerability where insufficient input validation and a large number of outputs could cause a server crash. A successful exploit of this vulnerability might lead to denial of service. | [email protected] | 7.5 | 0.52% | 2026-04-07 | 2026-06-17 |
| CVE-2026-24165 | NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. | [email protected] | 7.8 | 0.31% | 2026-03-31 | 2026-06-17 |
| CVE-2026-24164 | NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. | [email protected] | 8.8 | 0.47% | 2026-03-31 | 2026-06-17 |
| CVE-2026-24154 | NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information disclosure. | [email protected] | 7.6 | 0.26% | 2026-03-31 | 2026-06-17 |