Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-65145 | 10.0 critical | 1.0% | no CPE yet | NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. | Tue 27 Oct |
| CVE-2026-24252 | 7.8 high | 1.0% | nvidia, nemo | NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure. | Sat 24 Oct |
| CVE-2026-65151 | 8.4 high | 0.00% | no CPE yet | NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure. | Tue 27 Oct |
| CVE-2026-24155 | 7.8 high | 0.00% | nvidia, nemo | NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. | Sun 25 Oct |
| CVE-2026-24228 | 7.8 high | 0.00% | nvidia, nemo | NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and information disclosure. | Sun 25 Oct |
| CVE-2026-24240 | 7.8 high | 0.00% | nvidia, nemo_megatron_bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. | Sun 25 Oct |
| CVE-2026-24242 | 7.8 high | 0.00% | nvidia, nemo_megatron_bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure. | Sun 25 Oct |
| CVE-2026-24243 | 7.8 high | 0.00% | nvidia, nemo_megatron_bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. | Sun 25 Oct |
| CVE-2026-24244 | 7.8 high | 0.00% | nvidia, nemo_megatron_bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. | Sun 25 Oct |
| CVE-2026-24245 | 7.8 high | 0.00% | nvidia, nemo_megatron_bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. | Sun 25 Oct |
| CVE-2026-24246 | 7.8 high | 0.00% | nvidia, nemo_megatron_bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. | Sun 25 Oct |
| CVE-2026-24247 | 7.8 high | 0.00% | nvidia, nemo_megatron_bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. | Sun 25 Oct |
| CVE-2026-24248 | 7.8 high | 0.00% | nvidia, nemo_megatron_bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. | Sun 25 Oct |
| CVE-2026-24249 | 7.8 high | 0.00% | nvidia, nemo_megatron_bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. | Sun 25 Oct |
| CVE-2026-24250 | 7.8 high | 0.00% | nvidia, nemo_megatron_bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. | Sun 25 Oct |
| CVE-2026-24251 | 7.8 high | 0.00% | nvidia, nemo_megatron_bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. | Sun 25 Oct |
| CVE-2025-23361 | 7.8 high | 0.00% | nvidia, nemo | NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering. | 18 Oct |
| CVE-2025-33178 | 7.8 high | 0.00% | nvidia, nemo | NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data tampering. | 18 Oct |
| CVE-2025-33204 | 7.8 high | 0.00% | nvidia, nemo | NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering. | 18 Oct |
| CVE-2025-33203 | 7.6 high | 0.00% | no CPE yet | NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service. | 18 Oct |
| CVE-2025-33205 | 7.3 high | 0.00% | nvidia, nemo | NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution. | 18 Oct |
21 of 21
Download these 21 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.