CVE-2026-24186: Deserialization of Untrusted Data

NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution...

NVIDIA FLARE SDK Input Validation Error Vulnerability

NVIDIA FLARE SDK is a federal learning application development toolkit provided by NVIDIA Corporation in the United States. The NVIDIA Flare SDK has a vulnerability related to input validation errors. This vulnerability stems from path traversal, which leads to improper input validation,...

CVE-2026-24222: Exposure of Sensitive System Information to an Unauthorized Control Sphere

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandb...

CVE-2026-24231: Server-Side Request Forgery (SSRF)

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful...

CVE-2026-24178: Authorization Bypass Through User-Controlled Key

NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information...

connexity (0.0.8.3), fixa-dev (0.0.4) +4 more potentially affected by CVE-2025-62373 via pipecat-ai (>=0.0.48, <=0.0.92)

pipecat-ai PYPI version =0.0.48, =0.1.0, =0.0.2, =1.6.1.dev8325111910350515310, =1.7.1.dev260424103102100484 Source cves: CVE-2025-62373 Source advisory: OSV:GHSA-C2JG-5CP7-6WC7...

openSUSE 16 Security Update : gnome-remote-desktop (openSUSE-SU-2026:20590-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20590-1 advisory. Update to version 48.3. Security issues fixed: - CVE-2025-5024: an unauthenticated attacker can exhaust system resources bsc1244053. Other updates and...

Security update for gnome-remote-desktop (moderate)

openSUSE security update: security update for gnome-remote-desktop ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20590-1 Rating: moderate References: bsc1244053 Cross-References: CVE-2025-5024 CVSS scores: CVE-2025-5024 SUSE : 6.1...

EUVD-2026-24149

NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

EUVD-2026-24147

NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-24176

NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper authorization through cross-namespace pod references. A successful exploit of this vulnerability might lead to data tampering...

CVE-2026-24177

NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-24189

NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

CVE-2026-24189

NVIDIA CUDA-Q is affected by CVE-2026-24189, a vulnerability in an endpoint that allows an unauthenticated attacker to trigger an out-of-bounds read, potentially causing denial of service and information disclosure. The issue is documented with a CVSS v3.1 base score of 8.2 (High) and is associat...

CVE-2026-24189

NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

CVE-2026-24177

NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-24177

NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-24177

NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-24177

CVE-2026-24177 affects NVIDIA KAI Scheduler. The vulnerability allows an attacker to access API endpoints without authorization, potentially leading to information disclosure. NVIDIA’s security bulletin for April 2026 confirms the issue and recommends updating to KAI Scheduler v0.13.0 or later (L...

CVE-2026-24176

NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper authorization through cross-namespace pod references. A successful exploit of this vulnerability might lead to data tampering...