NVIDIA

Exploited now

None of this vendor's CVEs are on CISA's known-exploited list.

Recent

• 8.4HighOct 27, 2026NVIDIA TensorRT-LLM Code / command injectionCVE-2026-65119NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execution, information disclosure, data tampering, and denial of service.
• 7.8HighOct 27, 2026NVIDIA PhysX Memory corruptionCVE-2026-47486NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclosure.
• 7.1HighOct 27, 2026NVIDIA TensorRT-LLM SSRFCVE-2026-24269NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tampering.
• 10.0CriticalOct 27, 2026NVIDIA NeMo Agent Toolkit Auth bypass / access controlCVE-2026-65145NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
• 7.5HighAug 4, 2026Nvidia dynamo SSRFCVE-2026-47616NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
• 7.5HighAug 4, 2026Nvidia dynamo SSRFCVE-2026-47615NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.
• 7.5HighAug 4, 2026Nvidia dynamo SSRFCVE-2026-47614NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
• 7.5HighAug 4, 2026Nvidia dynamo SSRFCVE-2026-47613NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.
• 7.5HighAug 4, 2026Nvidia dynamo Path traversal / file handlingCVE-2026-47612NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure.
• 4.4MediumAug 4, 2026Nvidia triton inference server Path traversal / file handlingCVE-2026-47487NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
• 7.5HighAug 4, 2026Nvidia dynamoCVE-2026-24255NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tampering.
• 9.8CriticalAug 4, 2026Nvidia dynamo Auth bypass / access controlCVE-2026-24254NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
• 8.2HighAug 4, 2026Nvidia dynamo Memory corruptionCVE-2026-24253NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering.
• 4.3MediumJul 21, 2026NVIDIA Tranformers4Rec DeserializationCVE-2026-24232NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
• 6.3MediumApr 28, 2026Nvidia nemoclaw SSRFCVE-2026-24231NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit of this vulnerability may lead to information disclosure.
• 8.6HighApr 28, 2026Nvidia nemoclaw Information disclosureCVE-2026-24222NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandbox creation. A successful exploit of this vulnerability might lead to information disclosure.
• 6.5MediumApr 28, 2026Nvidia nvflare Information disclosureCVE-2026-24204NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to information disclosure.
• 8.8HighApr 28, 2026Nvidia nvflare DeserializationCVE-2026-24186NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution.
• 9.8CriticalApr 28, 2026Nvidia nvflare Auth bypass / access controlCVE-2026-24178NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information disclosure, code execution, and denial of service.

See every NVIDIA entry on the dashboard.

Top products

• dynamo8 CVEs in the last year, 1 critical
• nvflare3 CVEs in the last year, 1 critical
• TensorRT-LLM2 CVEs in the last year
• nemoclaw2 CVEs in the last year
• triton inference server1 CVE in the last year
• Tranformers4Rec1 CVE in the last year
• PhysX1 CVE in the last year
• NeMo Agent Toolkit1 CVE in the last year, 1 critical