{"schema_version":1,"title":"Nvidia vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 194 vulnerabilities in Nvidia: 19 in the last 7 days and 145 in the last 90 days, 11 of them critical and 0 exploited in the wild. The most recent, CVE-2026-65179, was published on 22 September 2026. 20 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/nvidia","json_url":"https://junglewise.ai/threats/vendors/nvidia.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/nvidia","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":138,"all_time":194,"critical":11,"exploited":0,"last_7_days":19,"last_30_days":52,"last_90_days":145,"last_365_days":194},"latest":[{"cve":"CVE-2026-65179","cvss":8.8,"epss":0.0067,"slug":"cve-2026-65179-nvidia-nemo-contains-a-vulnerability-in-the-tabulartokenizer","title":"NVIDIA NeMo unsafe pickle deserialization in TabularTokenizer","severity":"high","exploited":false,"published_at":"2026-09-22T15:17:13.67+00:00","url":"https://junglewise.ai/threats/cve-2026-65179-nvidia-nemo-contains-a-vulnerability-in-the-tabulartokenizer"},{"cve":"CVE-2026-65178","cvss":7.8,"epss":0.0038,"slug":"cve-2026-65178-nvidia-nemo-contains-a-vulnerability-in-its-dataset-loading","title":"NVIDIA NeMo unsafe parameter injection in model_config.yaml","severity":"high","exploited":false,"published_at":"2026-09-22T15:17:13.55+00:00","url":"https://junglewise.ai/threats/cve-2026-65178-nvidia-nemo-contains-a-vulnerability-in-its-dataset-loading"},{"cve":"CVE-2026-65130","cvss":8,"epss":0.0211,"slug":"cve-2026-65130-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux OS command injection","severity":"high","exploited":false,"published_at":"2026-09-22T15:17:13.43+00:00","url":"https://junglewise.ai/threats/cve-2026-65130-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65129","cvss":6.7,"epss":0.0013,"slug":"cve-2026-65129-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux improper certificate validation","severity":"medium","exploited":false,"published_at":"2026-09-22T15:17:13.307+00:00","url":"https://junglewise.ai/threats/cve-2026-65129-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65128","cvss":8.8,"epss":0.0059,"slug":"cve-2026-65128-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux SQL injection","severity":"high","exploited":false,"published_at":"2026-09-22T15:17:13.183+00:00","url":"https://junglewise.ai/threats/cve-2026-65128-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65127","cvss":4.1,"epss":0.0016,"slug":"cve-2026-65127-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux information disclosure in debug logs","severity":"medium","exploited":false,"published_at":"2026-09-22T15:17:13.063+00:00","url":"https://junglewise.ai/threats/cve-2026-65127-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65126","cvss":5,"epss":0.0031,"slug":"cve-2026-65126-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux behavioral workflow enforcement","severity":"medium","exploited":false,"published_at":"2026-09-22T15:17:12.923+00:00","url":"https://junglewise.ai/threats/cve-2026-65126-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65125","cvss":6.6,"epss":0.0061,"slug":"cve-2026-65125-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux path traversal","severity":"medium","exploited":false,"published_at":"2026-09-22T15:17:12.8+00:00","url":"https://junglewise.ai/threats/cve-2026-65125-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65124","cvss":5.9,"epss":0.0052,"slug":"cve-2026-65124-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux XML injection","severity":"medium","exploited":false,"published_at":"2026-09-22T15:17:12.67+00:00","url":"https://junglewise.ai/threats/cve-2026-65124-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65121","cvss":8.2,"epss":0.0032,"slug":"cve-2026-65121-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux authentication bypass","severity":"high","exploited":false,"published_at":"2026-09-22T15:17:12.543+00:00","url":"https://junglewise.ai/threats/cve-2026-65121-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65118","cvss":7.5,"epss":0.0013,"slug":"cve-2026-65118-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux improper certificate validation","severity":"high","exploited":false,"published_at":"2026-09-22T15:17:12.417+00:00","url":"https://junglewise.ai/threats/cve-2026-65118-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65117","cvss":5,"epss":0.0023,"slug":"cve-2026-65117-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux hard-coded password","severity":"medium","exploited":false,"published_at":"2026-09-22T15:17:12.297+00:00","url":"https://junglewise.ai/threats/cve-2026-65117-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65115","cvss":6.5,"epss":0.0053,"slug":"cve-2026-65115-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux resource exhaustion","severity":"medium","exploited":false,"published_at":"2026-09-22T15:17:11.777+00:00","url":"https://junglewise.ai/threats/cve-2026-65115-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65114","cvss":8.3,"epss":0.0041,"slug":"cve-2026-65114-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux missing authentication","severity":"high","exploited":false,"published_at":"2026-09-22T15:17:11.64+00:00","url":"https://junglewise.ai/threats/cve-2026-65114-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65113","cvss":9.8,"epss":0.0061,"slug":"cve-2026-65113-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux hard-coded credentials vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T15:17:11.513+00:00","url":"https://junglewise.ai/threats/cve-2026-65113-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65112","cvss":6.5,"epss":0.0053,"slug":"cve-2026-65112-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux resource exhaustion","severity":"medium","exploited":false,"published_at":"2026-09-22T15:17:11.39+00:00","url":"https://junglewise.ai/threats/cve-2026-65112-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-65111","cvss":7.8,"epss":0.0024,"slug":"cve-2026-65111-nvidia-nemo-speech-for-all-platforms-contains-a-vulnerability","title":"NVIDIA NeMo Speech code injection vulnerability","severity":"high","exploited":false,"published_at":"2026-09-22T15:17:11.253+00:00","url":"https://junglewise.ai/threats/cve-2026-65111-nvidia-nemo-speech-for-all-platforms-contains-a-vulnerability"},{"cve":"CVE-2026-24267","cvss":7.8,"epss":0.0034,"slug":"cve-2026-24267-nvidia-nemo-speech-for-all-platforms-contains-a-vulnerability-in","title":"NVIDIA NeMo Speech remote code execution in data explorer","severity":"high","exploited":false,"published_at":"2026-09-22T15:17:10.157+00:00","url":"https://junglewise.ai/threats/cve-2026-24267-nvidia-nemo-speech-for-all-platforms-contains-a-vulnerability-in"},{"cve":"CVE-2026-24239","cvss":7.8,"epss":0.0034,"slug":"cve-2026-24239-nvidia-nemo-speech-for-all-platforms-contains-a-vulnerability","title":"NVIDIA NeMo Speech remote code execution from malicious data","severity":"high","exploited":false,"published_at":"2026-09-22T15:17:10.013+00:00","url":"https://junglewise.ai/threats/cve-2026-24239-nvidia-nemo-speech-for-all-platforms-contains-a-vulnerability"},{"cve":"CVE-2026-16140","cvss":8.8,"epss":0.0027,"slug":"cve-2026-16140-openbmc-phosphor-net-ipmid-privilege-escalation-in-rakp","title":"OpenBMC phosphor-net-ipmid privilege escalation in RAKP authentication","severity":"high","exploited":false,"published_at":"2026-09-15T14:16:50.29+00:00","url":"https://junglewise.ai/threats/cve-2026-16140-openbmc-phosphor-net-ipmid-privilege-escalation-in-rakp"},{"cve":"CVE-2026-47625","cvss":7.5,"epss":0.0056,"slug":"cve-2026-47625-nvidia-triton-inference-server-authorization-bypass","title":"NVIDIA Triton Inference Server authorization bypass","severity":"high","exploited":false,"published_at":"2026-09-08T17:17:37.683+00:00","url":"https://junglewise.ai/threats/cve-2026-47625-nvidia-triton-inference-server-authorization-bypass"},{"cve":"CVE-2026-16497","cvss":7.5,"epss":0.0047,"slug":"cve-2026-16497-nvidia-triton-inference-server-excessive-iteration-denial-of","title":"NVIDIA Triton Inference Server excessive iteration denial of service","severity":"high","exploited":false,"published_at":"2026-09-08T17:17:32.91+00:00","url":"https://junglewise.ai/threats/cve-2026-16497-nvidia-triton-inference-server-excessive-iteration-denial-of"},{"cve":"CVE-2026-61779","cvss":7.8,"epss":0.0041,"slug":"cve-2026-61779-nvidia-megatron-bridge-deserialization-vulnerability","title":"NVIDIA Megatron Bridge deserialization vulnerability","severity":"high","exploited":false,"published_at":"2026-09-01T16:17:12.923+00:00","url":"https://junglewise.ai/threats/cve-2026-61779-nvidia-megatron-bridge-deserialization-vulnerability"},{"cve":"CVE-2026-61778","cvss":7.8,"epss":0.0041,"slug":"cve-2026-61778-nvidia-megatron-bridge-deserialization-of-untrusted-data","title":"NVIDIA Megatron Bridge deserialization of untrusted data","severity":"high","exploited":false,"published_at":"2026-09-01T16:17:12.813+00:00","url":"https://junglewise.ai/threats/cve-2026-61778-nvidia-megatron-bridge-deserialization-of-untrusted-data"},{"cve":"CVE-2026-61777","cvss":7.8,"epss":0.0041,"slug":"cve-2026-61777-nvidia-megatron-bridge-unsafe-deserialization","title":"NVIDIA Megatron Bridge unsafe deserialization","severity":"high","exploited":false,"published_at":"2026-09-01T16:17:12.697+00:00","url":"https://junglewise.ai/threats/cve-2026-61777-nvidia-megatron-bridge-unsafe-deserialization"}],"vendor":{"hub":true,"name":"Nvidia","slug":"nvidia","homepage":"https://www.nvidia.com/","description":"NVIDIA is a technology company that designs and manufactures graphics processing units (GPUs) and computing hardware.","url":"https://junglewise.ai/threats/vendors/nvidia"},"weekly":[{"week":"2026-06-29","critical":3,"exploited":0,"vulnerabilities":17},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":23},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-08-03","critical":1,"exploited":0,"vulnerabilities":16},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":1,"exploited":0,"vulnerabilities":8},{"week":"2026-08-24","critical":2,"exploited":0,"vulnerabilities":26},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":30},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":1,"exploited":0,"vulnerabilities":19}],"most_severe":[{"cve":"CVE-2026-65083","cvss":9.9,"epss":0.0086,"slug":"cve-2026-65083-nvidia-openshell-for-linux-incomplete-input-allowlist-in-sandbox","title":"NVIDIA OpenShell for Linux incomplete input allowlist in sandbox provisioning API","severity":"critical","exploited":false,"published_at":"2026-08-25T21:17:28.05+00:00","url":"https://junglewise.ai/threats/cve-2026-65083-nvidia-openshell-for-linux-incomplete-input-allowlist-in-sandbox"},{"cve":"CVE-2026-65093","cvss":9.9,"epss":0.008,"slug":"cve-2026-65093-nvidia-openshell-for-linux-sandbox-escape","title":"NVIDIA OpenShell for Linux sandbox escape","severity":"critical","exploited":false,"published_at":"2026-08-25T21:17:29.3+00:00","url":"https://junglewise.ai/threats/cve-2026-65093-nvidia-openshell-for-linux-sandbox-escape"},{"cve":"CVE-2026-24254","cvss":9.8,"epss":0.0089,"slug":"cve-2026-24254-nvidia-dynamo-for-linux-out-of-bounds-write-in-multimodal-serving","title":"NVIDIA Dynamo for Linux out-of-bounds write in multimodal serving topology","severity":"critical","exploited":false,"published_at":"2026-08-04T18:16:49.937+00:00","url":"https://junglewise.ai/threats/cve-2026-24254-nvidia-dynamo-for-linux-out-of-bounds-write-in-multimodal-serving"},{"cve":"CVE-2026-47627","cvss":9.8,"epss":0.0073,"slug":"cve-2026-47627-nvidia-triton-inference-server-path-traversal","title":"NVIDIA Triton Inference Server path traversal","severity":"critical","exploited":false,"published_at":"2026-08-18T19:16:51.29+00:00","url":"https://junglewise.ai/threats/cve-2026-47627-nvidia-triton-inference-server-path-traversal"},{"cve":"CVE-2026-53805","cvss":9.8,"epss":0.0069,"slug":"cve-2026-53805-nvidia-gen3c-remote-code-execution-in-inference-api-server","title":"NVIDIA GEN3C remote code execution in inference API server","severity":"critical","exploited":false,"published_at":"2026-06-17T18:18:05.32+00:00","url":"https://junglewise.ai/threats/cve-2026-53805-nvidia-gen3c-remote-code-execution-in-inference-api-server"},{"cve":"CVE-2026-65113","cvss":9.8,"epss":0.0061,"slug":"cve-2026-65113-nvidia-infrastructure-controller-for-linux-contains-a","title":"NVIDIA Infrastructure Controller for Linux hard-coded credentials vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T15:17:11.513+00:00","url":"https://junglewise.ai/threats/cve-2026-65113-nvidia-infrastructure-controller-for-linux-contains-a"},{"cve":"CVE-2026-24178","cvss":9.8,"epss":0.0057,"slug":"cve-2026-24178-nvidia-nvflare-dashboard-authorization-bypass-in-user-management","title":"NVIDIA NVFlare Dashboard authorization bypass in user management system","severity":"critical","exploited":false,"published_at":"2026-04-28T21:36:12+00:00","url":"https://junglewise.ai/threats/cve-2026-24178-nvidia-nvflare-dashboard-authorization-bypass-in-user-management"},{"cve":"CVE-2026-24270","cvss":9.8,"slug":"cve-2026-24270-nvidia-aistore-framework-authentication-bypass","title":"NVIDIA AIStore framework authentication bypass","severity":"critical","exploited":false,"published_at":"2026-07-01T16:16:46.017+00:00","url":"https://junglewise.ai/threats/cve-2026-24270-nvidia-aistore-framework-authentication-bypass"},{"cve":"CVE-2026-24207","cvss":9.8,"slug":"cve-2026-24207-nvidia-triton-inference-server-authentication-bypass","title":"NVIDIA Triton Inference Server authentication bypass","severity":"critical","exploited":false,"published_at":"2026-05-20T04:16:45.96+00:00","url":"https://junglewise.ai/threats/cve-2026-24207-nvidia-triton-inference-server-authentication-bypass"},{"cve":"CVE-2025-23351","cvss":9,"slug":"cve-2025-23351-nvidia-connectx-and-bluefield-out-of-bounds-write-in-command","title":"NVIDIA ConnectX and BlueField out-of-bounds write in command interface","severity":"critical","exploited":false,"published_at":"2026-07-01T16:16:29.903+00:00","url":"https://junglewise.ai/threats/cve-2025-23351-nvidia-connectx-and-bluefield-out-of-bounds-write-in-command"}],"generated_at":"2026-09-26T12:07:00.15149+00:00","technologies":[{"name":"Nvidia Megatron-Bridge","slug":"megatron-bridge","vulnerabilities":43,"url":"https://junglewise.ai/threats/technologies/megatron-bridge"},{"name":"Nvidia NeMo Megatron Bridge","slug":"nemo-megatron-bridge","vulnerabilities":32,"url":"https://junglewise.ai/threats/technologies/nemo-megatron-bridge"},{"name":"Nvidia Triton Inference Server","slug":"triton-inference-server","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/triton-inference-server"},{"name":"Nvidia Dynamo","slug":"dynamo","vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/dynamo"},{"name":"Nvidia TensorRT-LLM","slug":"tensorrt-llm","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/tensorrt-llm"},{"name":"Nvidia Nemoclaw","slug":"nemoclaw","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/nemoclaw"},{"name":"Nvidia Display Driver","slug":"display-driver","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/display-driver"},{"name":"Nvidia Dynamo for Linux","slug":"dynamo-for-linux","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/dynamo-for-linux"},{"name":"Nvidia Display Driver for Linux","slug":"display-driver-for-linux","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/display-driver-for-linux"},{"name":"Nvidia Dgx Spark","slug":"dgx-spark","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/dgx-spark"},{"name":"Nvidia Dgx Spark Uefi","slug":"dgx-spark-uefi","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/dgx-spark-uefi"},{"name":"Nvidia TensorRT","slug":"tensorrt","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/tensorrt"},{"name":"Nvidia Tesla","slug":"tesla","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/tesla"},{"name":"Nvidia UFM Enterprise","slug":"ufm-enterprise","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/ufm-enterprise"},{"name":"Nvidia DALI","slug":"dali","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/dali"},{"name":"Nvidia Jetson Linux","slug":"jetson-linux","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/jetson-linux"},{"name":"Nvidia NeMo Framework","slug":"nemo-framework","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/nemo-framework"},{"name":"Nvidia Nemo Speech","slug":"nemo-speech","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/nemo-speech"},{"name":"Nvidia OpenShell for Linux","slug":"openshell-for-linux","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/openshell-for-linux"},{"name":"Nvidia TRT-LLM","slug":"trt-llm","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/trt-llm"}]}