Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-24227 | 9.8 critical | 1.0% | nvidia, tensorrt | NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution. | Sat 24 Oct |
| CVE-2026-65119 | 8.4 high | 0.00% | no CPE yet | NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execution, information disclosure, data tampering, and denial of service. | Tue 27 Oct |
| CVE-2026-24233 | 8.4 high | 0.00% | no CPE yet | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. | Sat 24 Oct |
| CVE-2026-24238 | 7.8 high | 0.00% | nvidia, tensorrt | NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution. | Sat 24 Oct |
| CVE-2026-24268 | 7.8 high | 0.00% | nvidia, tensorrt | NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution. | Sat 24 Oct |
| CVE-2026-24272 | 7.8 high | 0.00% | nvidia, tensorrt | NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lead to code execution. | Sat 24 Oct |
| CVE-2026-47472 | 7.8 high | 0.00% | no CPE yet | NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service. | Sat 24 Oct |
| CVE-2026-47471 | 7.5 high | 0.00% | no CPE yet | NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of service. | Sat 24 Oct |
| CVE-2026-47473 | 7.4 high | 0.00% | no CPE yet | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure. | Sat 24 Oct |
| CVE-2026-24229 | 7.3 high | 0.00% | no CPE yet | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service. | Sat 24 Oct |
| CVE-2026-65120 | 7.1 high | 0.00% | no CPE yet | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure. | Tue 27 Oct |
| CVE-2026-24269 | 7.1 high | 0.00% | no CPE yet | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tampering. | Tue 27 Oct |
| CVE-2026-24234 | 6.8 medium | 0.00% | no CPE yet | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to denial of service and information disclosure. | Sat 24 Oct |
| CVE-2026-24220 | 6.4 medium | 0.00% | nvidia, tensorrt-llm | NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution. | Sat 24 Oct |
| CVE-2026-24259 | 6.4 medium | 0.00% | no CPE yet | NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure. | Sat 24 Oct |
| CVE-2026-24226 | 6.3 medium | 0.00% | no CPE yet | NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure. | Sat 24 Oct |
| CVE-2026-24271 | 6.2 medium | 0.00% | no CPE yet | NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A successful exploit of this vulnerability might lead to denial of service. | Sat 24 Oct |
| CVE-2026-47470 | 6.2 medium | 0.00% | no CPE yet | NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack. A successful exploit of this vulnerability might lead to denial of service. | Sat 24 Oct |
| CVE-2026-47475 | 6.2 medium | 0.00% | no CPE yet | NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploit of this vulnerability might lead to denial of service. | Sat 24 Oct |
19 of 19
Download these 19 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.