Nvidia vulnerabilities
1,179 CVEs and advisories name Nvidia as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-65082NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection.
- CVE-2026-65081NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code.
- CVE-2026-65089NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injectio
- CVE-2026-65090NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection.
- CVE-2026-65099NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection.
- CVE-2026-65098NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication.
- CVE-2026-65097NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without int
- CVE-2026-65096NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection.
- CVE-2026-65093NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape.
- CVE-2026-65092NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy.
- CVE-2026-65091NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection.
- CVE-2026-24166NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic k
- CVE-2026-24168NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause
- CVE-2026-24167NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands
- CVE-2026-24169NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject co
- CVE-2026-24170NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause imprope
- CVE-2026-47624NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user.
- CVE-2026-24225NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read.
- CVE-2026-24263NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer derefere
- CVE-2026-47626NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.
- CVE-2026-24262NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.
- CVE-2026-47630NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal.
- CVE-2026-47629NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation.
- CVE-2026-47628NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits.
- CVE-2026-47627NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal.
- CVE-2026-47606NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal.
- CVE-2026-24185NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is en
- CVE-2026-24184NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacke
- CVE-2026-24183NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege mana
- CVE-2026-47623NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.