CVE-2026-24185

NVIDIA NVOS for network switches contains a vulnerability in the secure shell SSH server configuration component while PKA-only mode is enabled, where an administrator could inadvertently enable an alternative authentication path. If best practices for replacing the default password as recommende...

CVE-2026-24185

NVIDIA NVOS for network switches contains a vulnerability in the secure shell SSH server configuration component while PKA-only mode is enabled, where an administrator could inadvertently enable an alternative authentication path. If best practices for replacing the default password as recommende...

EUVD-2026-61104

NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol LLDP daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution...

CVE-2026-24184

An unauthenticated attacker on an adjacent network can trigger a buffer overflow in the LLDP daemon of NVIDIA Cumulus Linux via crafted LLDP frames, potentially leading to code execution. CVSS 3.1 scores this HIGH (7.5) with no privileges required; exploitation details are not publicly available....

CVE-2026-24183

NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2026-24183

NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2026-24183

The Initial Description provides concrete technical details: the affected product is NVIDIA Cumulus Linux, the vulnerable component is the user management module, the root cause is improper privilege management, and the impact is local privilege escalation (CVSS 7.8 HIGH). No fix version or explo...

CVE-2026-24183: Execution with Unnecessary Privileges

NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges...

PT-2026-77260

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure...

PT-2026-77256

NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2026-47629: Improper Input Validation

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service...

Security Bulletin: NVIDIA Cumulus Linux and NVOS - August 2026

NVIDIA has released a software update for NVIDIA® Cumulus Linux and NVOS. To protect your system, download and install the latest NVIDIA components from the NVIDIA Enterprise Support Portal. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that...

PT-2026-77261

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service...

PT-2026-77263

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux affected versions not specified Description An issue exists where improper input validation can be triggered by an attacker, potentially leading to a denial of service DoS, which is a condition where a...

PT-2026-77264

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution...

CVE-2026-47628: Allocation of Resources Without Limits or Throttling

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. A successful exploit might lead to denial of service...

CVE-2026-24185: Authentication Bypass Using an Alternate Path or Channel

NVIDIA NVOS for network switches contains a vulnerability in the secure shell SSH server configuration component while PKA-only mode is enabled, where an administrator could inadvertently enable an alternative authentication path. If best practices for replacing the default password as recommende...

CVE-2026-47606: Absolute Path Traversal

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure...

CVE-2026-24184: Buffer Copy without Checking Size of Input

NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol LLDP daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution...

CVE-2026-47630: Absolute Path Traversal

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution...