43 matches found
CVE-2026-24248
NVIDIA Megatron Bridge for Linux contains CVE-2026-24248: an attacker could cause improper control of code generation, potentially leading to code execution, privilege escalation, data tampering, and information disclosure. Affected product: Megatron Bridge for Linux. Root cause: improper control...
CVE-2026-24245
CVE-2026-24245 affects NVIDIA Megatron Bridge for Linux. The vulnerability involves deserialization of untrusted data and could lead to code execution, privilege escalation, data tampering, and information disclosure. Affected: Megatron-Bridge; root cause not explicitly detailed beyond the deseri...
CVE-2026-24244
NVIDIA Megatron Bridge for Linux contains CVE-2026-24244, a deserialization of untrusted data vulnerability that can lead to code execution, privilege escalation, data tampering, and information disclosure. The NVIDIA security bulletin confirms affected product: Megatron-Bridge; updated versions ...
CVE-2026-24243
NVIDIA Megatron Bridge for Linux (CVE-2026-24243) is affected by a vulnerability in deserialization of untrusted data, potentially enabling code execution, privilege escalation, data tampering, and information disclosure. The issue arises in the Megatron Bridge software, with CVSSv3.1 base score ...
CVE-2026-24249
CVE-2026-24249 affects NVIDIA Megatron Bridge for Linux and describes deserialization of untrusted data leading to potential code execution, privilege escalation, data tampering, and information disclosure. The NVIDIA security bulletin confirms this vulnerability is addressed in the security upda...
CVE-2025-33239
CVE-2025-33239 affects NVIDIA Megatron Bridge. Reports confirm a vulnerability in the data merging tutorial that can be triggered by malicious input, with potential consequences including code execution, privilege escalation, information disclosure, and data tampering. Multiple sources (NVD/Red H...
CVE-2026-24242
NVIDIA Megatron Bridge for Linux contains a vulnerability (CVE-2026-24242) that could allow a attacker to perform server-side request forgery, potentially leading to information disclosure. The NVIDIA security bulletin reassures that a software update to version 0.4.1 or later fixes this and othe...
CVE-2026-24251
NVIDIA Megatron Bridge for Linux (CVE-2026-24251) is vulnerable due to improper control of dynamically managed code resources, enabling potential code execution, privilege escalation, data tampering, and information disclosure. The NVIDIA security bulletin confirms this CVE and states that updati...
CVE-2026-24246
NVIDIA Megatron Bridge for Linux is affected by CVE-2026-24246, a vulnerability in the handling of dynamically managed code resources that could lead to code execution, privilege escalation, data tampering, and information disclosure. The NVIDIA security bulletin indicates the fix is included in ...
CVE-2026-24240
Summary (CVE-2026-24240): NVIDIA Megatron Bridge for Linux contains a vulnerability that allows deserialization of untrusted data, potentially enabling code execution, privilege escalation, data tampering, and information disclosure. Root cause: insecure deserialization in the bridge component. A...
CVE-2026-24250
NVIDIA Megatron Bridge for Linux (Megatron-Bridge) is affected by CVE-2026-24250 due to improper validation of allowed inputs. The NVIDIA security bulletin lists this CVE among a set of related deserialization and resource-management issues that may lead to code execution, privilege escalation, d...
CVE-2026-24247
CVE-2026-24247 affects NVIDIA Megatron Bridge for Linux and is linked to deserialization of untrusted data, with potential for code execution, privilege escalation, data tampering, and information disclosure. The NVIDIA security bulletin notes mitigation by upgrading to version 0.4.1 or later (Me...
CVE-2026-61752
NVIDIA Megatron Bridge (versions 0.0 to 0.5.0) is affected by a deserialization of untrusted data vulnerability (CWE-502). A local attacker with low privileges and no user interaction could exploit this to achieve code execution, data tampering, and information disclosure , rated CVSS 7.8 (HIGH) ...
CVE-2025-33240
CVE-2025-33240 affects NVIDIA Megatron Bridge. The vulnerability is a data shuffling tutorial input handling flaw that could allow code injection, with potential for code execution, privilege escalation, information disclosure, and data tampering. NVIDIA’s security bulletin (and Red Hat/CIRCL/Sny...
CVE-2026-61750
NVIDIA Megatron Bridge is vulnerable to deserialization of untrusted data (CWE-502) . An attacker with local access and low privileges (no user interaction required) can trigger the flaw, potentially leading to code execution, data tampering, and information disclosure . The CVSS v3.1 base score ...
CVE-2026-61756
NVIDIA Megatron Bridge (versions 0.0 to 0.5.0) is affected by a deserialization of untrusted data vulnerability (CWE-502). A local attacker with low privileges and no user interaction can exploit this to achieve code execution, data tampering, and information disclosure . The CVSS 3.1 score is 7....
CVE-2026-61754
CVE-2026-61754 affects NVIDIA Megatron Bridge (versions 0.0 through 0.5.0 , all platforms). The root cause is deserialization of untrusted data (CWE-502), allowing a local attacker with low privileges to achieve code execution, data tampering, and information disclosure . The CVSS v3.1 score is 7...
CVE-2026-61753
NVIDIA Megatron Bridge is affected by a vulnerability allowing an attacker to cause deserialization of untrusted data , which could lead to code execution, data tampering, and information disclosure . The connected NVIDIA security bulletin classifies this specific CVE under CWE-22 (Path Traversal...
CVE-2026-61761
CVE-2026-61761 is one of 30 deserialization-of-untrusted-data flaws (CWE-502) in NVIDIA Megatron Bridge , an open-source framework for large-scale model training. The vulnerability requires local access with low privileges and no user interaction , yet can lead to code execution, data tampering, ...
CVE-2026-61764
CVE-2026-61764 is a deserialization of untrusted data vulnerability (CWE-502 ) in NVIDIA Megatron Bridge , affecting versions 0.0 through 0.5.0 on all platforms. A successful local exploit (low complexity, low privileges required) could lead to code execution, data tampering, and information disc...
CVE-2026-61757
NVIDIA Megatron Bridge versions 0.0 through 0.5.0 contain a deserialization of untrusted data vulnerability (CWE-502) rated HIGH (CVSS 7.8) . A local attacker with low privileges and no user interaction could exploit this to achieve code execution, data tampering, and information disclosure . The...
CVE-2026-61755
CVE-2026-61755 affects NVIDIA Megatron Bridge versions 0.0 through 0.5.0 across all platforms. The root cause is a deserialization of untrusted data flaw (CWE-502), part of a batch of 30 related CVEs disclosed in NVIDIA's September 2026 security bulletin. A successful local exploit requires low p...
CVE-2026-61763
NVIDIA Megatron Bridge versions 0.0 through 0.5.0 are affected by a deserialization of untrusted data vulnerability (CWE-502). A local attacker with low privileges can exploit this without user interaction to achieve code execution, data tampering, and information disclosure , rated CVSS 7.8 (HIG...
CVE-2026-61768
NVIDIA Megatron Bridge is affected by a vulnerability where an attacker could cause deserialization of untrusted data . A successful exploit may lead to code execution, data tampering, and information disclosure . The CVSS 3.1 base score is 7.8 (HIGH) , with a local attack vector, low complexity,...
CVE-2026-61770
NVIDIA Megatron Bridge is affected by a deserialization of untrusted data vulnerability. A local attacker with low privileges (no user interaction required) could exploit this to achieve code execution, data tampering, and information disclosure , with high impact on confidentiality, integrity, a...
CVE-2026-61758
CVE-2026-61758 affects NVIDIA Megatron Bridge (versions 0.0 to 0.5.0 , all platforms). The root cause is deserialization of untrusted data (CWE-502), allowing a local attacker with low privileges to achieve code execution, data tampering, and information disclosure . The vulnerability is scored C...
CVE-2026-61772
NVIDIA Megatron Bridge is affected by a deserialization of untrusted data vulnerability that could allow an attacker with local access and low privileges to achieve code execution, data tampering, and information disclosure . The assigned CVSS 3.1 score is 7.8 (HIGH) , with a local attack vector,...
CVE-2026-61773
NVIDIA Megatron Bridge is affected by a deserialization of untrusted data vulnerability. A successful exploit could lead to code execution, data tampering, and information disclosure . The assigned CVSS v3.1 score is 7.8 (HIGH) with a local attack vector , low complexity, and low privileges requi...
CVE-2026-61762
NVIDIA Megatron Bridge (versions 0.0 to 0.5.0) is vulnerable to deserialization of untrusted data (CWE-502). An attacker with local access and low privileges can exploit this to achieve code execution, data tampering, and information disclosure , rated CVSS 7.8 (HIGH) . The vulnerability affects ...
CVE-2026-61769
NVIDIA Megatron Bridge is affected by a deserialization of untrusted data vulnerability (CVE-2026-61769). An attacker with local access and low privileges (no user interaction required) can trigger the flaw, potentially leading to code execution , data tampering , and information disclosure . The...
CVE-2026-61774
NVIDIA Megatron Bridge is affected by a deserialization of untrusted data vulnerability. A successful exploit could lead to code execution , data tampering , and information disclosure . The CVSS v3.1 score is 7.8 (HIGH) , with a local attack vector, low privileges required, and no user interacti...
CVE-2026-61751
CVE-2026-61751 affects NVIDIA Megatron Bridge (versions 0.0 through 0.5.0, all platforms). The root cause is deserialization of untrusted data (CWE-502), which a local attacker with low privileges and no user interaction can exploit to achieve code execution, data tampering, and information discl...
CVE-2026-61760
CVE-2026-61760 is a deserialization of untrusted data vulnerability (CWE-502) in NVIDIA Megatron Bridge , affecting versions 0.0 through 0.5.0 on all platforms. A successful local exploit with low privileges required could result in code execution, data tampering, and information disclosure , wit...
CVE-2026-61759
NVIDIA Megatron Bridge versions 0.0 through 0.5.0 (all platforms) are affected by a deserialization of untrusted data flaw (CWE-502). A local attacker with low privileges can exploit it to achieve code execution, data tampering, and information disclosure , rated CVSS 7.8 (HIGH) . This is one of ...
CVE-2026-61771
NVIDIA Megatron Bridge is affected by a deserialization of untrusted data vulnerability (CVE-2026-61771). A successful exploit could lead to code execution, data tampering, and information disclosure . The CVSS v3.1 score is 7.8 (HIGH) with a local attack vector, low privileges required, and no u...
CVE-2026-61777
NVIDIA Megatron Bridge is vulnerable to deserialization of untrusted data , which an attacker can exploit to achieve code execution , data tampering , and information disclosure . The assigned CVSS 3.1 score is 7.8 (HIGH) with a local attack vector , low complexity , and low privileges required ,...
CVE-2026-61775
NVIDIA Megatron Bridge is affected by a deserialization of untrusted data vulnerability. A successful exploit could lead to code execution, data tampering, and information disclosure . The CVSS v3.1 base score is 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, ...
CVE-2026-61776
NVIDIA Megatron Bridge is affected by a deserialization of untrusted data vulnerability. A successful exploit could result in code execution, data tampering, and information disclosure . The assigned CVSS 3.1 score is 7.8 (HIGH) , with a local attack vector , low complexity , low privileges requi...
CVE-2026-61778
NVIDIA Megatron Bridge is affected by a deserialization of untrusted data vulnerability (CVE-2026-61778). An attacker with local access and low privileges, requiring no user interaction, could trigger the deserialization flaw, potentially leading to code execution, data tampering, and information...
CVE-2026-61765
NVIDIA Megatron Bridge is affected by a deserialization of untrusted data vulnerability. An attacker with local access and low privileges (no user interaction required) could exploit this to achieve code execution , data tampering , and information disclosure . The vulnerability carries a CVSS 3....
CVE-2026-61767
NVIDIA Megatron Bridge is vulnerable to deserialization of untrusted data , which could allow an attacker to achieve code execution, data tampering, and information disclosure . The vulnerability has a CVSS 3.1 base score of 7.8 (HIGH) with a local attack vector, low complexity, low privileges re...
CVE-2026-61779
NVIDIA Megatron Bridge is affected by a deserialization of untrusted data vulnerability that could allow an attacker to achieve code execution , data tampering , and information disclosure . The CVSS 3.1 score is 7.8 (HIGH) , with a local attack vector , low complexity , and low privileges requir...
CVE-2026-61766
NVIDIA Megatron Bridge is affected by a deserialization of untrusted data vulnerability. A successful exploit could lead to code execution , data tampering , and information disclosure . The assigned CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, and low privileges requi...