EUVD-2026-65606

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi...

CVE-2026-24225

NVIDIA DGX Spark is affected by an out-of-bounds read in the standalone MM firmware , which could allow an attacker with local and high privileges to cause information disclosure . The CVSS v3.1 score is 6.0 (MEDIUM) with a changed scope and high confidentiality impact. No in-the-wild exploitatio...

CVE-2026-24225

NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure...

EUVD-2026-65605

NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-24263

NVIDIA DGX Spark is affected by a NULL pointer dereference vulnerability in its system firmware . A privileged local attacker can trigger the flaw, potentially leading to code execution, privilege escalation, denial of service, information disclosure, and data tampering . The CVSS 3.1 score is 8....

EUVD-2026-65604

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data...

CVE-2026-24263

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data...

CVE-2026-47626

NVIDIA DGX Spark contains a vulnerability in its system firmware that allows a privileged attacker to trigger an out-of-bounds write . The attack vector is local with low complexity , though high privileges are required and the scope is changed , indicating the vulnerability can affect resources ...

CVE-2026-47626

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tamperi...

EUVD-2026-65603

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tamperi...

CVE-2026-24262

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tamperi...

CVE-2026-24262

NVIDIA DGX Spark contains an out-of-bounds write vulnerability in its system firmware . A privileged local attacker can exploit this to achieve code execution , privilege escalation , denial of service , information disclosure , or data tampering . The CVSS 3.1 score is 8.2 (HIGH) , reflecting a ...

EUVD-2026-65602

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tamperi...

CVE-2026-20783

A flaw was found in the Intel NPU Driver firmware due to an improper conditions check. An unprivileged attacker with authenticated user access can exploit this vulnerability locally with low complexity and no user interaction. This can lead to a denial of service, severely impacting the...

Zyxel NAS Firmware 5.21- Remote Code Execution

Multiple Zyxel network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. Zyxel NAS devices achieve authentication by using th...

PT-2026-81385

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tamperi...

TencentOS Server 4: microcode_ctl (TSSA-2026:0851)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0851 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

The vulnerability of the authentication mechanism for the RPC2_Login web interface of the Dahua software allows a perpetrator to escalate their privileges.

The vulnerability of the RPC2Login authentication mechanism in the Dahua device’s microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

CVE-2026-6017

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

CVE-2026-74693

A flaw was found in the prestera network driver in the Linux kernel. The presterafwhdrparse function reads the firmware header before checking that the firmware image contains the entire header. This oversight could allow a local attacker to provide a specially crafted, malformed firmware image,...