Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/04/29 8:48 p.m.4 views

CVE-2026-24231

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful...

6.3CVSS5.3AI score0.00129EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/28 5:46 p.m.1 views

CVE-2026-24231

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful...

6.3CVSS5.3AI score0.00129EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/28 5:46 p.m.2 views

CVE-2026-24231

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful...

6.3CVSS5.3AI score0.00129EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/28 5:46 p.m.29 views

CVE-2026-24231

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful...

6.3CVSS0.00129EPSS
Exploits0References3
CVE
CVE
added 2026/04/28 5:46 p.m.6 views

CVE-2026-24231

NVIDIA NemoClaw is affected by CVE-2026-24231 in the validateEndpointUrl() SSRF protection pathway. A crafted endpoint URL referencing the 0.0.0.0/8 range through a blueprint configuration or CLI flag can trigger a server-side request forgery and may lead to information disclosure. The NVIDIA sec...

6.3CVSS5.3AI score0.00129EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.4 views

PT-2026-35757

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful...

6.3CVSS5.3AI score0.00129EPSS
Exploits0References3
Rows per page
Query Builder