Read the docs

NVIDIA

Records1248All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical86CVSS 9.0–10.0
CVSS high785CVSS 7.0–8.9

Exploited now

NVIDIA records in CISA KEV

No NVIDIA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

15 records in Dynamo · all components

TI-2026-19555 CVE-2026-24254 · GHSA-4gq3-gh66-qq8g

Authentication bypass in NVIDIA Dynamo

Priority MEDIUM 51

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00889 Published 2026-08-04 No fix listed CWE-288
Priority MEDIUM 43

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00692 Published 2026-08-04 No fix listed CWE-502
TI-2026-19554 CVE-2026-24253 · GHSA-5c7q-rvp2-6mxc

Out-of-bounds write in NVIDIA Dynamo

Priority MEDIUM 43

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00641 Published 2026-08-04 No fix listed CWE-787
TI-2026-35129 CVE-2026-47618 · GHSA-25vv-hwhq-wjg6

Server-side request forgery in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-08-04 No fix listed CWE-918
TI-2026-35128 CVE-2026-47617 · GHSA-h44j-2vgw-q5f2

Server-side request forgery in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-08-04 No fix listed CWE-918
TI-2026-35127 CVE-2026-47616 · GHSA-65pc-qfwh-rrgx

Server-side request forgery in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-08-04 No fix listed CWE-918
TI-2026-35126 CVE-2026-47615 · GHSA-hc3w-j3wp-q93q

Server-side request forgery in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-08-04 No fix listed CWE-918
TI-2026-35125 CVE-2026-47614 · GHSA-3q7g-m267-rp98

Server-side request forgery in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-08-04 No fix listed CWE-918
TI-2026-35124 CVE-2026-47613 · GHSA-prwc-w88m-jpv7

Server-side request forgery in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-08-04 No fix listed CWE-918
TI-2026-35123 CVE-2026-47612 · GHSA-xc5r-xx6g-q3cj

Path traversal in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0082 Published 2026-08-04 No fix listed CWE-22
Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimen…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00545 Published 2026-08-04 No fix listed CWE-1023
Priority LOW 30

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00459 Published 2026-08-04 No fix listed CWE-209
Priority LOW 29

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00415 Published 2026-08-04 No fix listed CWE-367
TI-2026-35131 CVE-2026-47620 · GHSA-cw8w-568w-v2v5

Race condition in NVIDIA Dynamo

Priority LOW 29

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00415 Published 2026-08-04 No fix listed CWE-362
Open these records in search →