Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3027▼ 69 respecto a la semana anterior
Críticas / altas1424▲ 58 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
–

112 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaAlta (7.8)0.40%—Nvidia Nemo Megatron Bridge1/9/20262/9/2026
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
AnalizadaAlta (7.8)0.40%—Nvidia Nemo Megatron Bridge1/9/20262/9/2026
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
AnalizadaAlta (7.8)0.40%—Nvidia Nemo Megatron Bridge1/9/20262/9/2026
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
AnalizadaAlta (7.8)0.40%—Nvidia Nemo Megatron Bridge1/9/20262/9/2026
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
AnalizadaAlta (7.8)0.40%—Nvidia Nemo Megatron Bridge1/9/20262/9/2026
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
AnalizadaAlta (7.8)0.40%—Nvidia Nemo Megatron Bridge1/9/20262/9/2026
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
AnalizadaAlta (7.8)0.40%—Nvidia Nemo Megatron Bridge1/9/20262/9/2026
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
AnalizadaAlta (7.8)0.54%—Nvidia Nemo Megatron Bridge1/9/20262/9/2026
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
AnalizadaAlta (7.8)0.40%—Nvidia Nemo Megatron Bridge1/9/20262/9/2026
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
AnalizadaAlta (7.8)0.40%—Nvidia Nemo Megatron Bridge1/9/20262/9/2026
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
AnalizadaAlta (7.8)0.40%—Nvidia Nemo Megatron Bridge1/9/20262/9/2026
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
AnalizadaAlta (8.1)0.49%—Nvidia Nemoclaw25/8/20261/9/2026
NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service.
AnalizadaAlta (7.8)1.3%—Nvidia Nemoclaw25/8/20261/9/2026
NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.
AnalizadaCrítica (9.8)0.99%—Nvidia Nemoclaw25/8/20261/9/2026
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.
AnalizadaAlta (8.8)0.32%—Nvidia Nemoclaw25/8/20261/9/2026
NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
AnalizadaAlta (7.8)1.3%—Nvidia Nemoclaw25/8/20261/9/2026
NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
AnalizadaAlta (7.8)1.3%—Nvidia Nemoclaw25/8/20261/9/2026
NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.
AnalizadaAlta (7.8)1.3%—Nvidia Nemoclaw25/8/20261/9/2026
NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.
AnalizadaMedia (5.5)0.17%—Nvidia Nemoclaw25/8/20261/9/2026
NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might lead to information disclosure.
AnalizadaMedia (6.1)0.15%—Nvidia Nemoclaw25/8/20261/9/2026
NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering.
AnalizadaCrítica (9.8)0.51%—Nvidia Nemoclaw25/8/20261/9/2026
NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, code execution, and escalation of privileges.
AnalizadaAlta (7.8)0.22%—Nvidia Nemoclaw25/8/20261/9/2026
NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.
AnalizadaCrítica (9.8)0.41%—Nvidia Nemoclaw25/8/20261/9/2026
NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of service.
AnalizadaAlta (7.8)1.5%—Nvidia Nemo27/7/20264/9/2026
NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure.
Pendiente de análisisMedia (6.3)0.27%—Trustyai Service OperatorAIGorchAINemoguardrailsAI8/7/202631/8/2026
A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardrails, if a specific security setting is not enabled, these services can expose their communication channels without requiring users to prove their identity. This allows any other program within the cluster to access the…