PT-2026-27502

NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception. A successful exploit of this vulnerability may lead to denial of service...

Security Bulletin: NVIDIA B300 MCU - March 2026

NVIDIA has released a software update for NVIDIA® B300 to address the security issues described in this bulletin. To protect your system, download and install the latest version of the NVIDIA B300 firmware from the NVIDIA Developer Tools page. Go to NVIDIA Product Security. Details The following...

NVIDIA SNAP-4 Container security vulnerabilities

NVIDIA SNAP-4 Container is a containerized operating environment component provided by NVIDIA Corporation in the United States. There is a security vulnerability present in NVIDIA SNAP-4 Container, which stems from an error in buffer size calculation within the configuration interface, potentiall...

NVIDIA B300 MCU security vulnerabilities

NVIDIA B300 MCU is a micro-control unit component developed by NVIDIA Corporation, used for managing and controlling hardware devices. The NVIDIA B300 MCU has a security vulnerability; this vulnerability stems from the CX8 MCU allowing modifications to unsupported registry keys, which may lead to...

NVIDIA Triton Inference Server Compatibility Issues Vulnerability

NVIDIA Triton Inference Server is an open-source software developed by NVIDIA Corporation. It helps standardize model deployment and provide fast, scalable AI in production environments. NVIDIA Triton Inference Server has a vulnerability known as a race condition issue, which can lead to internal...

NVIDIA Megatron-LM code-related vulnerabilities

NVIDIA Megatron-LM is a distributed training framework based on PyTorch developed by NVIDIA Corporation in the United States. It is specifically designed for training large-scale Transformer language models. NVIDIA Megatron-LM has code vulnerabilities, particularly an insecure deserialization...

NVIDIA Megatron-LM code-related vulnerabilities

NVIDIA Megatron-LM is a distributed training framework based on PyTorch developed by NVIDIA Corporation in the United States. It is specifically designed for training large-scale Transformer language models. NVIDIA Megatron-LM has code vulnerabilities, which stem from checkpoint loading issues...

Security Bulletin: NVIDIA Model Optimizer - March 2026

NVIDIA has released a software update for NVIDIA® Model Optimizer. To protect your system, clone or update this software to ModelOpt 0.41.0 Release or later from NVIDIA Github. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security...

PT-2026-27508

NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a specially crafted input file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...

PT-2026-27513

NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker may cause a denial of service by providing a large compressed payload. A successful exploit of this vulnerability may lead to denial of service...

PT-2026-27514

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework affected versions not specified Description The NVIDIA NeMo Framework has a flaw that could allow an attacker to trigger remote code execution. Successful exploitation of this issue may result in code execution, privilege...

PT-2026-27511

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering...

NVIDIA Model Optimizer code-related vulnerabilities

NVIDIA Model Optimizer is a tool component developed by NVIDIA Corporation that optimizes the performance of deep learning models and improves inference efficiency. NVIDIA Model Optimizer has a code vulnerability, which stems from an insecure deserialization issue in the ONNX quantization functio...

PT-2026-27512

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework affected versions not specified Description The NVIDIA NeMo Framework has a flaw in how it loads checkpoints, potentially allowing a remote attacker to execute code. Exploitation of this issue could result in code...

PT-2026-27510

NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33247: Deserialization of Untrusted Data

NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

llama-index-packs-vanna (>=0.1.5, <=0.3.0), nvidia-nat-vanna (>=1.4.0a20260123, <=1.7.0a20260513) +1 more potentially affected by CVE-2026-4229 via vanna (2.0.2)

vanna PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on vanna and may be impacted: - llama-index-packs-vanna =0.1.5, =1.4.0a20260123, =1.0.0, =2.0.0 Source cves: CVE-2026-4229 Source advisory: GHSA-6MJ8-JMP2-G8Q7...

llama-index-packs-vanna (>=0.1.5, <=0.3.0), nvidia-nat-vanna (>=1.4.0a20260123, <=1.7.0a20260513) +1 more potentially affected by CVE-2026-4229 via vanna (2.0.2)

vanna PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on vanna and may be impacted: - llama-index-packs-vanna =0.1.5, =1.4.0a20260123, =1.0.0, =2.0.0 Source cves: CVE-2026-4229 Source advisory: OSV:GHSA-6MJ8-JMP2-G8Q7...

Securing Autonomous AI Agents with TrendAI & NVIDIA OpenShell

Learn how TrendAI and NVIDIA OpenShell help secure autonomous AI agents and build trusted enterprise AI systems with stronger visibility and control...

Ubuntu: Security Advisory (USN-8059-8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...