Quick answers
- Is CVE-2026-24212 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-24212 being exploited in the wild.
- How severe is CVE-2026-24212?
- High severity, with a CVSS score of 7.5, published 26 May 2026.
- Which products and versions are affected?
- Nvidia Isaac Launchable Linux versions.
- Is there a fix for CVE-2026-24212?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-24212 attacked?
- It is attacked from the adjacent network, in a software library.
- Am I affected by CVE-2026-24212?
- Check whether you run Nvidia Isaac Launchable at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
NVIDIA Isaac Launchable for Linux is vulnerable to CWE-319 (Cleartext Transmission of Sensitive Information). The application transmits sensitive data over the network without encryption, which can be intercepted by an attacker with adjacent network access. According to the CVSS vector, the attack complexity is high, suggesting specific conditions or timing may be required to successfully capture the relevant traffic. If exploited, this vulnerability allows for information disclosure, which can be leveraged to achieve remote code execution, escalation of privileges, and data tampering. Users are advised to refer to NVIDIA advisory 5830 for patching information.
Affected products
- NVIDIA Isaac Launchable Linux versions
Timeline
- 2026-05-26: disclosed: Initial publication of the CVE record