NVIDIA vulnerabilities and fixes

CVEs that mention NVIDIA, ranked by priority. 26 tracked.

NVIDIA has 26 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 26. Most recent: 2026-08-18. Highest priority: CVE-2026-24254 (score 62/100).

• CVE-2026-24254 CRITICAL 9.8 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could c
• CVE-2026-47627 CRITICAL 9.8 UPGRADE NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal
• CVE-2026-63298 CRITICAL 9.9 UPGRADE An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling a
• CVE-2026-47623 HIGH 8.2 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted da
• CVE-2026-24252 HIGH 7.8 UPGRADE NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection
• CVE-2026-24253 HIGH 8.2 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write
• CVE-2026-47612 HIGH 7.5 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause im
• CVE-2026-47628 HIGH 7.5 UPGRADE NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation
• CVE-2026-47629 HIGH 7.5 UPGRADE NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input
• CVE-2026-24255 HIGH 7.5 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could ca
• CVE-2026-47613 HIGH 7.5 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname
• CVE-2026-47614 HIGH 7.5 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery
• CVE-2026-47615 HIGH 7.5 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by su
• CVE-2026-47616 HIGH 7.5 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause s
• CVE-2026-47617 HIGH 7.5 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause s
• CVE-2026-47618 HIGH 7.5 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could
• CVE-2026-47606 MEDIUM 6.5 UPGRADE NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute pa
• CVE-2026-47619 MEDIUM 6.6 UPGRADE NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system fa
• CVE-2026-47620 MEDIUM 6.5 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA ma
• CVE-2026-47621 MEDIUM 6.5 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA ma
• CVE-2026-47622 MEDIUM 5.3 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error message
• CVE-2026-64832 HIGH 8.8 UPGRADE FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder wit
• CVE-2026-24183 HIGH 7.8 MITIGATE NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user cou
• CVE-2026-24185 HIGH 7.1 NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration compo
• CVE-2026-47630 MEDIUM 5.5 UPGRADE NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute pa
• CVE-2026-47487 MEDIUM 4.4 UPGRADE NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the m

FAQ

How do I fix NVIDIA vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is NVIDIA being exploited right now?

None of the tracked NVIDIA CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which NVIDIA CVE should I patch first?

CVE-2026-24254 currently ranks highest (62/100): NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could c.

← Back to latest CVEs