PT-2026-96752

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

PT-2026-96751

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An issue exists that allows an attacker to perform SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. A...

PT-2026-96748

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An issue exists where an attacker can achieve external control of a file name or path. This could lead to code execution, escalation of privileges, data...

PT-2026-96754

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo affected versions not specified Description A flaw exists in the dataset-loading workflow where a maliciously crafted model config.yaml file allows the injection of unsafe parameters. This can result in remote code execution, data...

PT-2026-96739

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Speech affected versions not specified Description Malicious input created by an attacker could cause a code injection. This issue may lead to arbitrary code execution, information disclosure, and data tampering. Recommendations At...

CVE-2026-65118: Improper Certificate Validation

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

PT-2026-96744

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...

CVE-2026-65130: Improper Neutralization of Special Elements used in an OS Command

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

PT-2026-96737

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Speech affected versions not specified Description Malicious data created by an attacker can lead to remote code execution. A successful exploit may result in code execution, information disclosure, and data tampering...

PT-2026-96755

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo affected versions not specified Description The TabularTokenizer class contains an unsafe deserialization issue. The software uses the pickle.load function to process untrusted .pkl files provided by an attacker without proper...

CVE-2026-65129: Improper Certificate Validation

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

PT-2026-96741

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description NVIDIA Infrastructure Controller for Linux contains hard-coded credentials that can be used to authenticate to the controller/management interface. An...

CVE-2026-65111: Improper Neutralization of Special Elements used in a Command

NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-65128: Improper Neutralization of Special Elements used in an SQL Command

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-24239: Deserialization of Untrusted Data

NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-87840 Tripzzy < 1.5.1 - Unauthenticated Booking Data Tampering

The Tripzzy WordPress plugin before 1.5.1 does not perform any capability or ownership checks on its administrative booking-management actions, which are additionally exposed to unauthenticated users and gated only by a token the Tripzzy WordPress plugin before 1.5.1 issues to any anonymous visit...

WordPress Tripzzy plugin < 1.5.1 - Unauthenticated Booking Data Tampering vulnerability

Unauthenticated Booking Data Tampering vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Tripzzy Travel Engine System versions 1.5.1...

CVE-2026-87840

The Tripzzy WordPress plugin (versions before 1.5.1 ) contains an improper access control vulnerability allowing unauthenticated booking data tampering. The plugin fails to perform necessary capability or ownership checks on administrative booking-management actions. These actions are exposed to ...

CVE-2026-54504 MCP Documentation Server: Web UI API binds to all interfaces without authentication by default

MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically started Web UI in src/server.ts calls startWebServer in src/web-server.ts with STARTWEBUI enabled by default and WEBPORT set to 3080...

Linux Distros Unpatched Vulnerability : CVE-2026-87279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable...