These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The CVE-2026-47623 vulnerability affects NVIDIA Dynamo for Linux, allowing an attacker to cause deserialization of untrusted data, potentially leading to denial of service and data tampering. Organizations using this product should be aware of the vulnerability and take steps to mitigate it. The CVSS score of 8.2 indicates high severity. The vulnerability was published on 2026-08-04T18:16:51.983Z and has [truncated]
The CVE-2026-47622 vulnerability in NVIDIA Dynamo for Linux allows an attacker to generate error messages containing sensitive information, potentially leading to information disclosure. This vulnerability has a CVSS score of 5.3 and is classified as MEDIUM severity. Organizations should review and update their systems to mitigate the potential risk of information disclosure. The CVE record was published [truncated]
The CVE-2026-47621 vulnerability in NVIDIA Dynamo for Linux could lead to denial of service and data tampering due to a race condition in the LoRA manager singleton initialization. This vulnerability has a CVSS score of 6.5 and is classified as MEDIUM severity. Linux users and administrators who utilize NVIDIA Dynamo should review and apply patches to mitigate potential risks. The CVE record was published [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-04T18:16:51.610Z and has not been modified since then. CVE-2026-47620 is a vulnerability in NVIDIA Dynamo for Linux that could cause a race condition in the LoRA manager singleton initialization, potentially leading to data tampering and denial of service. The vulnerability has a CVSS score of 6.5 a [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-04T18:16:51.490Z and has not been modified since then. The vulnerability in NVIDIA Dynamo for Linux examples and recipes could cause a system failure, potentially leading to code execution, data tampering, denial of service, and information disclosure. Linux users and administrators should review sy [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-04T18:16:51.367Z and has not been modified since then. The vulnerability affects NVIDIA Dynamo for Linux, specifically the Rust multimodal media fetcher component. This component is vulnerable to server-side request forgery, which could lead to information disclosure. Organizations should review and [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-04T18:16:51.250Z and has not been modified since then. CVE-2026-47617 is a vulnerability in NVIDIA Dynamo for Linux, specifically in the multimodal media fetcher, which could lead to server-side request forgery via DNS rebinding, potentially resulting in information disclosure. Organizations using N [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-04T18:16:51.120Z and has not been modified since then. CVE-2026-47616 is a vulnerability in NVIDIA Dynamo for Linux's multimodal media fetcher, which could allow an attacker to perform server-side request forgery, potentially leading to information disclosure. The vulnerability has a CVSS score of 7 [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-04T18:16:50.997Z and has not been modified since then. NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure. Organiz [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record for CVE-2026-47614 was published on 2026-08-04T18:16:50.877Z. This vulnerability affects NVIDIA Dynamo for Linux, allowing an attacker to cause server-side request forgery, which could lead to information disclosure. The vulnerability is classified under CWE-918 and has a CVSS score of 7.5, indicating a HIGH severity. Evide [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-04T18:16:50.750Z and has not been modified since then. NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. This vulnerability might lead to information disc [truncated]
NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. This could lead to information disclosure. Organizations should review and apply patches or updates provided by NVIDIA to address the vulnerability. The CVE record was published on 2026-08-04T18:16:50.630Z. Affected systems and administrat [truncated]
The CVE-2026-47487 vulnerability affects NVIDIA Triton Inference Server for Linux, allowing users to read, write, or modify files outside the model repository by manipulating the model name in the Triton MLflow plugin. This could lead to denial of service and information disclosure. Organizations should review and apply patches from NVIDIA and restrict access to the model repository. Evidence is limited, [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-04T18:16:50.070Z and has not been modified since then. The vulnerability in NVIDIA Dynamo for Linux affects the multimodal embedding cache, allowing an attacker to cause a hash collision by submitting images with identical pixel byte sequences but different dimensions, potentially leading to data ta [truncated]
The CVE-2026-24254 vulnerability is a critical issue in NVIDIA Dynamo for Linux, affecting its multimodal serving topology. This vulnerability could lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. System administrators and security teams must be aware of this vulnerability and take immediate action to apply patches or updates provided by NVI [truncated]
NVIDIA Dynamo for Linux contains an out-of-bounds write vulnerability, CVE-2026-24253, with a CVSS score of 8.2, indicating high severity. This vulnerability could lead to denial of service and data tampering. The CVE record was published on 2026-08-04T18:16:49.767Z. System administrators and Linux users, especially those using NVIDIA Dynamo, should be aware of this vulnerability and prepare for patching. [truncated]
CVE-2026-24252 is an OS command injection vulnerability in NVIDIA NeMo for Linux. Successful exploitation may lead to code execution, data tampering, escalation of privileges, and information disclosure. The vulnerability has a CVSS score of 7.8 and is classified as HIGH severity. This vulnerability affects NVIDIA NeMo for Linux, allowing an attacker to inject OS commands, which could result in code execu [truncated]
CVE-2026-24272 is a high-severity vulnerability in NVIDIA's TensorRT, potentially leading to code execution via a heap-based buffer overflow. The vulnerability has a CVSS score of 7.8 and is considered HIGH severity. NVIDIA TensorRT is a high-performance deep learning inference optimizer and runtime. Successful exploitation of this vulnerability might lead to code execution.
CVE-2026-24268 is a high-severity vulnerability in NVIDIA TensorRT, potentially leading to code execution via a heap-based buffer overflow. The vulnerability has a CVSS score of 7.8 and is classified as HIGH. NVIDIA TensorRT is affected by this vulnerability, with the vulnerable version being prior to 11.0. The vulnerability exists in NVIDIA TensorRT, where an attacker might cause a heap-based buffer over [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-14T21:16:44.397Z and has not been modified since then. The NVD entry is currently Analyzed. This vulnerability affects NVIDIA TensorRT for, allowing improper validation of an array index, which could lead to code execution. The CVSS score is 7.8, classified as HIGH severity. Security teams and admin [truncated]
CVE-2026-24227 is a deserialization vulnerability in NVIDIA's TensorRT, which could lead to code execution. The vulnerability has a CVSS score of 5.3 and is considered medium severity. Successful exploitation could lead to code execution. Organizations using NVIDIA TensorRT should review and apply patches to mitigate this vulnerability. The vulnerability is described as CWE-502.
CVE-2026-24228 is a HIGH severity vulnerability in NVIDIA NeMo Framework for Linux. The vulnerability allows an attacker to cause deserialization of untrusted data, which could lead to code execution, escalation of privileges, data tampering, and information disclosure. The Common Vulnerability Scoring System (CVSS) score for this vulnerability is 7.8.
CVE-2026-24155 is a HIGH severity vulnerability in the NVIDIA NeMo Framework. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. The vulnerability has a CVSS score of 7.8 and was published on [cvePublishedAt](https://www.cve.org/CVERecord?id=CVE-2026-24155).
NVIDIA vGPU software contains an out-of-bounds access vulnerability in the virtual GPU manager. The issue is rated MEDIUM severity with a CVSS 3.1 score of 5.8 (AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H). A successful exploit could result in data tampering, denial of service, or information disclosure. The vulnerability was published to the NVD on 2026-05-26 and subsequently modified the same day. The root caus [truncated]
A use-after-free vulnerability in NVIDIA vGPU software's virtual GPU manager allows local attackers with low privileges to potentially achieve denial of service, privilege escalation, information disclosure, data tampering, or code execution. The vulnerability stems from improper handling of stack memory in the virtual GPU manager component. With a CVSS 3.1 score of 7.0 (HIGH), this vulnerability requires [truncated]
A race condition vulnerability exists in NVIDIA Display Driver for Linux within a kernel module. The flaw stems from improper memory ordering controls, allowing a local attacker to trigger a denial of service condition by manipulating compiler or processor memory instruction ordering. The attack requires local access with low privileges, and successful exploitation results in system availability impact wi [truncated]
A race condition vulnerability in NVIDIA GPU Display Driver for Linux allows an advanced attacker with high privileges to leak sensitive memory. The flaw could result in limited information disclosure, denial of service, or data tampering. The CVSS 3.1 score of 5.6 (MEDIUM) reflects local attack vector, low attack complexity, high privileges required, and high availability impact with limited confidential [truncated]
A vulnerability in NVIDIA Display Driver for Linux affects Multi-Instance GPU (MIG) partition management. The issue stems from insecure default initialization of memory subsystem routing resources during partition reconfiguration, which could result in data corruption or system hang. Successful exploitation may lead to denial of service. The vulnerability is classified as CWE-1188 (Insecure Default Initia [truncated]
A high-severity vulnerability in NVIDIA Display Driver for Linux allows local attackers to trigger out-of-bounds reads, potentially causing denial of service and information disclosure. The vulnerability requires local access with low privileges and no user interaction, making it exploitable by authenticated users on affected systems. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) indicates hig [truncated]
A vulnerability in NVIDIA Display Driver for Linux's Unified Virtual Memory (UVM) component allows improper input validation, potentially leading to denial of service. The CVSS 3.1 score of 7.1 (HIGH) reflects local attack vector with low attack complexity, no privileges required, no user interaction, and changed scope, with high availability impact. The vulnerability is classified under CWE-20 (Improper [truncated]
A vulnerability in NVIDIA Display Driver for Linux allows local attackers to exploit improper permission handling in a kernel mode layer handler. The flaw, published 2026-05-26, carries a CVSS 3.1 score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Successful exploitation could result in denial of service, privilege escalation, information disclosure, data tampering, and code executi [truncated]
NVIDIA Display Driver for Windows and Linux contains an out-of-bounds write vulnerability (CWE-787) with a CVSS 3.1 score of 7.8 (HIGH). The vulnerability was published to the NVD on 2026-05-26 and is currently undergoing analysis. A successful exploit could result in denial of service, privilege escalation, information disclosure, data tampering, or code execution. The attack vector is local (AV:L) with [truncated]
A heap buffer overflow vulnerability in NVIDIA Display Driver for Linux, caused by incorrect numeric type conversion, exposes affected systems to multiple high-impact attack vectors including privilege escalation and code execution. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH severity) with a local attack vector requiring low privileges but no user interaction. Published by NVIDIA PSIRT on 202 [truncated]
A time-of-check time-of-use (TOCTOU) vulnerability exists in NVIDIA Display Driver for Windows. The flaw stems from a race condition between when a resource is checked and when it is used, allowing an attacker to manipulate the resource state between these two operations. Successful exploitation could result in denial of service, privilege escalation, information disclosure, data tampering, or code execut [truncated]
NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
A use-after-free vulnerability in NVIDIA Display Driver for Linux permits local attackers to trigger memory corruption. The flaw is reachable with low attack complexity from a low-privileged local context, and successful exploitation may result in denial of service, privilege escalation, information disclosure, data tampering, or code execution. The vulnerability is classified as CWE-416 (Use After Free) [truncated]
A vulnerability in NVIDIA Display Driver for Windows and Linux allows an attacker with local access to leak held driver locks, potentially causing denial of service. The issue stems from improper lock handling (CWE-667) and carries a CVSS 3.1 score of 6.5 (Medium severity). The attack requires low complexity and local access with low privileges, but no user interaction. The vulnerability was published to [truncated]
CVE-2025-33221 is a medium-severity vulnerability in NVIDIA Display Driver for Windows and Linux, affecting the kernel driver component. The vulnerability involves incorrect permission assignment for a critical resource (CWE-20), which could allow an authenticated local attacker with high privileges to cause data tampering and denial of service. The CVSS 3.1 vector (AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) in [truncated]
NVIDIA Isaac Launchable for Linux transmits sensitive information in clear text, creating exposure to interception and subsequent exploitation. The vulnerability carries a HIGH severity CVSS 3.1 score of 7.5 with an attack vector of adjacent network (AV:A), high attack complexity (AC:H), and no required privileges or user interaction. Successful exploitation may result in code execution, privilege escalat [truncated]
CVE-2026-24162 is a HIGH severity vulnerability (CVSS 7.8) in NVIDIA Transformers4Rec for Linux, published on 2026-05-26. The vulnerability stems from improper deserialization of untrusted data (CWE-502), which could allow an attacker to achieve code execution, data tampering, and information disclosure. The attack vector is local (AV:L), requires low attack complexity (AC:L), no privileges (PR:N), and us [truncated]
CVE-2026-24218 describes a provisioning flaw in NVIDIA DGX OS where cloning a base image causes identical SSH host keys to be deployed across multiple systems. Reusing the same host identity across hosts weakens SSH trust and can let an attacker impersonate a machine or position as a man-in-the-middle during administration and automation. The published CVSS 3.1 vector indicates network reachability with h [truncated]
NVIDIA BioNeMo Core for Linux is reported to have a path traversal issue that can be triggered by loading a malicious file. The published severity is high (CVSS 8.8), and the stated impact includes code execution, denial of service, information disclosure, and data tampering. The attack requires user interaction, so the practical risk is highest where untrusted files or datasets are opened in BioNeMo Core workflows.
CVE-2026-24216 is a high-severity deserialization vulnerability affecting NVIDIA BioNemo for Linux. According to the CVE/NVD record, a user could trigger deserialization of untrusted data, which may lead to code execution, denial of service, information disclosure, and data tampering. The published CVSS vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates local attack conditions and user interaction are [truncated]
CVE-2026-24188 describes an out-of-bounds write in NVIDIA TensorRT. According to the published CVE record, a successful exploit could lead to data tampering. The CVSS vector indicates network-based, low-complexity exploitation with no privileges or user interaction required, making this a high-priority integrity issue for environments that deploy TensorRT.
On 2026-05-20, NVIDIA disclosed CVE-2026-24215 affecting Triton Inference Server’s DALI backend. The issue is classified as uncontrolled resource consumption (CWE-400) and can lead to denial of service. The published CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H, so the primary impact is availability rather than confidentiality or integrity. NVD’s affected CPE criteria marks nvidia:triton_inferen [truncated]
CVE-2026-24214 is a high-severity vulnerability in NVIDIA Triton Inference Server’s DALI backend. According to the vendor-linked record, an attacker could trigger an integer overflow that may result in code execution, data tampering, or denial of service. The NVD record maps the issue to CWE-190 and identifies affected Triton Inference Server versions before 26.03.
CVE-2026-24213 is a high-severity vulnerability in NVIDIA Triton Inference Server’s DALI backend. According to the official records, an attacker could trigger an out-of-bounds read, and successful exploitation might result in code execution, data tampering, denial of service, or information disclosure. The NVD record marks Triton Inference Server versions before 26.03 as affected.
Published on 2026-05-20, CVE-2026-24210 describes an integer overflow in NVIDIA Triton Inference Server that can be exploited remotely to cause denial of service. The issue is rated CVSS 7.5 (HIGH) with network attack vector, no privileges required, and no user interaction needed. According to the official records, affected Triton Inference Server versions are those before 26.03.
CVE-2026-24209 is a network-reachable path traversal issue in NVIDIA Triton Inference Server. According to the vendor and NVD records, a successful exploit could lead to denial of service. The issue was published on 2026-05-20 and is mapped to CWE-22, with an availability-only impact profile.
CVE-2026-24208 is a medium-severity path traversal vulnerability in NVIDIA Triton Inference Server. According to official records, a successful network-based attack with no privileges and no user interaction could result in denial of service. The NVD record maps the issue to CWE-22 and lists affected Triton Inference Server versions before 26.03.