Is CVE-2026-16497 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-16497 being exploited in the wild.

How severe is CVE-2026-16497?

High severity, with a CVSS score of 7.5, published 8 September 2026.

Is there a fix for CVE-2026-16497?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-16497 attacked?

It is attacked over the network.

Am I affected by CVE-2026-16497?

Check whether you run Nvidia Triton Inference Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-16497: NVIDIA Triton Inference Server excessive iteration denial of service

CVE-2026-16497 · Severity: high · CVSS 7.5 · Published 2026-09-08

NVIDIA Triton Inference Server is a widely-used inference platform that runs machine learning models in production. A vulnerability in the Linux version allows a remote attacker to cause excessive iteration loops, leading to denial of service and unavailability of the inference service for legitimate users and applications.

Technologies: Nvidia Triton Inference Server. Vendors: Nvidia.

Quick answers

Is CVE-2026-16497 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-16497 being exploited in the wild.
How severe is CVE-2026-16497?: High severity, with a CVSS score of 7.5, published 8 September 2026.
Which products and versions are affected?: Nvidia Triton Inference Server <UNKNOWN>.
Is there a fix for CVE-2026-16497?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-16497 attacked?: It is attacked over the network.
Am I affected by CVE-2026-16497?: Check whether you run Nvidia Triton Inference Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability involves a logic flaw in Triton Inference Server for Linux that permits an attacker to trigger excessive iteration in a processing loop without proper bounds checking or rate limiting. The attack is network-accessible and does not require authentication or user interaction. A successful exploit causes the server to consume CPU resources in an infinite or near-infinite loop, rendering the service unavailable. No patch details are currently available in the advisory, but NVIDIA has assigned CVE-2026-16497 and published a security bulletin.

Affected products

NVIDIA Triton Inference Server <UNKNOWN>

Timeline

2026-09-08: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.