BaselineWatch
58781 CVEs · 135 in KEV
Desk
CVEs known58,781 New, 24 h669 Changed, 24 h882 In KEV135 Public exploit1,592 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVEs
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-24227 9.8 critical 1.0% nvidia, tensorrt NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution. Sat 24 Oct
CVE-2026-65119 8.4 high 0.00% no CPE yet NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execution, information disclosure, data tampering, and denial of service. Tue 27 Oct
CVE-2026-24233 8.4 high 0.00% no CPE yet NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. Sat 24 Oct
CVE-2026-24238 7.8 high 0.00% nvidia, tensorrt NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution. Sat 24 Oct
CVE-2026-24268 7.8 high 0.00% nvidia, tensorrt NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution. Sat 24 Oct
CVE-2026-24272 7.8 high 0.00% nvidia, tensorrt NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lead to code execution. Sat 24 Oct
CVE-2026-47472 7.8 high 0.00% no CPE yet NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service. Sat 24 Oct
CVE-2026-47471 7.5 high 0.00% no CPE yet NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of service. Sat 24 Oct
CVE-2026-47473 7.4 high 0.00% no CPE yet NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure. Sat 24 Oct
CVE-2026-24229 7.3 high 0.00% no CPE yet NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service. Sat 24 Oct
CVE-2026-65120 7.1 high 0.00% no CPE yet NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure. Tue 27 Oct
CVE-2026-24269 7.1 high 0.00% no CPE yet NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tampering. Tue 27 Oct
CVE-2026-24234 6.8 medium 0.00% no CPE yet NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to denial of service and information disclosure. Sat 24 Oct
CVE-2026-24220 6.4 medium 0.00% nvidia, tensorrt-llm NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution. Sat 24 Oct
CVE-2026-24259 6.4 medium 0.00% no CPE yet NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure. Sat 24 Oct
CVE-2026-24226 6.3 medium 0.00% no CPE yet NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure. Sat 24 Oct
CVE-2026-24271 6.2 medium 0.00% no CPE yet NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A successful exploit of this vulnerability might lead to denial of service. Sat 24 Oct
CVE-2026-47470 6.2 medium 0.00% no CPE yet NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack. A successful exploit of this vulnerability might lead to denial of service. Sat 24 Oct
CVE-2026-47475 6.2 medium 0.00% no CPE yet NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploit of this vulnerability might lead to denial of service. Sat 24 Oct

19 of 19

Download these 19 as CSV · subscribe to this list.

EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.