Read the docs

NVIDIA

Records1248All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical86CVSS 9.0–10.0
CVSS high785CVSS 7.0–8.9

Exploited now

NVIDIA records in CISA KEV

No NVIDIA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

58 records in Triton Inference Server · all components

Priority MEDIUM 54

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02552 Published 2026-05-20 No fix listed CWE-288
Priority MEDIUM 53

NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a specially crafted HTTP request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02548 Published 2025-08-06 Fixed in 25.07 CWE-122
Priority MEDIUM 53

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause stack buffer overflow by specially crafted inputs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01909 Published 2025-08-06 Fixed in 25.07 CWE-121
Priority MEDIUM 53

NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an improper memory access issue by a network API.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.18918 Published 2024-05-09 No fix listed CWE-119
Priority MEDIUM 50

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00734 Published 2026-08-18 No fix listed CWE-22
Priority MEDIUM 50

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause a remote code execution by manipulating the model name parameter in the model control API…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00736 Published 2025-09-17 Fixed in 25.08 CWE-78
Priority MEDIUM 49

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00582 Published 2026-05-20 Fixed in r26.03 CWE-288
Priority MEDIUM 47

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04895 Published 2026-05-20 Fixed in r26.03 CWE-22
Priority MEDIUM 47

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0299 Published 2025-08-06 Fixed in 25.07 CWE-121
Priority MEDIUM 46

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write by sending a request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0163 Published 2025-08-06 Fixed in 25.07 CWE-805
Priority MEDIUM 44

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00719 Published 2026-05-20 Fixed in r26.03 CWE-190
Priority MEDIUM 44

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00716 Published 2026-05-20 Fixed in r26.03 CWE-125
Priority MEDIUM 44

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00833 Published 2025-08-06 Fixed in 25.07 CWE-805
Priority MEDIUM 43

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00467 Published 2025-09-17 Fixed in 25.07 CWE-20
Priority MEDIUM 42

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through specially crafted inputs.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0059 Published 2025-08-06 Fixed in 25.05 CWE-190
Priority MEDIUM 42

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00853 Published 2024-01-12 Fixed in 2.40 CWE-23
Priority MEDIUM 41

NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions issue by sending extra large payloads.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00972 Published 2025-12-03 No fix listed CWE-754
Priority MEDIUM 41

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause the shared memory limit to be exceeded by sending a very large request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01009 Published 2025-08-06 Fixed in 25.07 CWE-209
Priority MEDIUM 40

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00672 Published 2026-08-18 No fix listed CWE-20
Priority MEDIUM 40

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00602 Published 2026-05-20 Fixed in r26.03 CWE-190
Load more
Open these records in search →