CVE-2026-47483

NVIDIA DCGM Exporter (all platforms) has a vulnerability in the /debug/pprof endpoints that allows an attacker to cause uncontrolled resource consumption by issuing concurrent unauthenticated profiling requests. This can lead to denial of service and information disclosure. The CVSS 3.1 base metr...

CVE-2026-47483

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...

CVE-2026-47483

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...

CVE-2026-47483

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...

Security Bulletin: NVIDIA DCGM Exporter - July 2026

NVIDIA has released a software update for NVIDIA® DCGM Exporter. To protect your system, clone or update this software from the NVIDIA/dcgm-exporter GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update addresses...

PT-2026-65505

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...

CVE-2026-47483: Allocation of Resources Without Limits or Throttling

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...

GHSA-Q4F6-JM68-57WW vulnerabilities

Vulnerabilities for packages: tez, zipkin, management-api-for-apache-cassandra-5.0, trino, druid, cloudwatch-exporter, logstash, apache-nifi, strimzi-kafka-operator, celeborn, thingsboard, wavefront-proxy, apache-pulsar, flyway, infinispan, akhq, spark, apicurio-registry, opensearch, keycloak,...

CVE-2026-56746 vulnerabilities

Vulnerabilities for packages: tez, zipkin, management-api-for-apache-cassandra-5.0, trino, druid, cloudwatch-exporter, logstash, apache-nifi, strimzi-kafka-operator, celeborn, thingsboard, wavefront-proxy, apache-pulsar, flyway, infinispan, akhq, spark, apicurio-registry, opensearch, keycloak,...

GHSA-6CQP-G7GG-8HR5 vulnerabilities

Vulnerabilities for packages: tez, zipkin, management-api-for-apache-cassandra-5.0, trino, druid, cloudwatch-exporter, logstash, apache-nifi, strimzi-kafka-operator, celeborn, thingsboard, wavefront-proxy, apache-pulsar, flyway, infinispan, akhq, spark, apicurio-registry, opensearch, keycloak,...

GHSA-6JQX-86GH-F27W vulnerabilities

Vulnerabilities for packages: tez, zipkin, management-api-for-apache-cassandra-5.0, trino, druid, cloudwatch-exporter, logstash, apache-nifi, strimzi-kafka-operator, celeborn, thingsboard, wavefront-proxy, apache-pulsar, flyway, infinispan, akhq, spark, apicurio-registry, opensearch, keycloak,...

CVE-2026-59899 vulnerabilities

Vulnerabilities for packages: tez, zipkin, management-api-for-apache-cassandra-5.0, trino, druid, cloudwatch-exporter, logstash, apache-nifi, strimzi-kafka-operator, celeborn, thingsboard, wavefront-proxy, apache-pulsar, flyway, infinispan, akhq, spark, apicurio-registry, opensearch, keycloak,...

GHSA-4MP9-239F-G9HG vulnerabilities

Vulnerabilities for packages: tez, zipkin, management-api-for-apache-cassandra-5.0, trino, druid, cloudwatch-exporter, logstash, apache-nifi, strimzi-kafka-operator, celeborn, thingsboard, wavefront-proxy, apache-pulsar, flyway, infinispan, akhq, spark, apicurio-registry, opensearch, keycloak,...

CVE-2026-55831 vulnerabilities

Vulnerabilities for packages: tez, zipkin, management-api-for-apache-cassandra-5.0, trino, druid, cloudwatch-exporter, logstash, apache-nifi, strimzi-kafka-operator, celeborn, thingsboard, wavefront-proxy, apache-pulsar, flyway, infinispan, akhq, spark, apicurio-registry, opensearch, keycloak,...

CVE-2026-59898 vulnerabilities

Vulnerabilities for packages: tez, zipkin, management-api-for-apache-cassandra-5.0, trino, druid, cloudwatch-exporter, logstash, apache-nifi, strimzi-kafka-operator, celeborn, thingsboard, wavefront-proxy, apache-pulsar, flyway, infinispan, akhq, spark, apicurio-registry, opensearch, keycloak,...

GHSA-4MP9-239F-G9HG vulnerabilities

Vulnerabilities for packages: kafka-bridge, tez, reposilite, keycloak-fips, kserve-modelmesh, opensearch, strimzi-kafka-operator, spark-kubernetes-operator-fips, metabase, airbyte-server, thingsboard, opensearch-fips, spark-fips, logstash, apache-hop-fips, apache-pulsar, conductor, flyway,...

GHSA-GCJF-9MGH-3P7G vulnerabilities

Vulnerabilities for packages: kafka-bridge, tez, reposilite, keycloak-fips, kserve-modelmesh, opensearch, strimzi-kafka-operator, spark-kubernetes-operator-fips, metabase, airbyte-server, thingsboard, opensearch-fips, spark-fips, logstash, apache-hop-fips, apache-pulsar, conductor, flyway,...

CVE-2026-59899 vulnerabilities

Vulnerabilities for packages: kafka-bridge, tez, reposilite, keycloak-fips, kserve-modelmesh, opensearch, strimzi-kafka-operator, spark-kubernetes-operator-fips, metabase, airbyte-server, thingsboard, opensearch-fips, spark-fips, logstash, apache-hop-fips, apache-pulsar, conductor, flyway,...

CVE-2026-56746 vulnerabilities

Vulnerabilities for packages: kafka-bridge, tez, reposilite, keycloak-fips, kserve-modelmesh, opensearch, strimzi-kafka-operator, spark-kubernetes-operator-fips, metabase, airbyte-server, thingsboard, opensearch-fips, spark-fips, logstash, apache-hop-fips, apache-pulsar, conductor, flyway,...

GHSA-6JQX-86GH-F27W vulnerabilities

Vulnerabilities for packages: kafka-bridge, tez, reposilite, keycloak-fips, kserve-modelmesh, opensearch, strimzi-kafka-operator, spark-kubernetes-operator-fips, metabase, airbyte-server, thingsboard, opensearch-fips, spark-fips, logstash, apache-hop-fips, apache-pulsar, conductor, flyway,...