This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] NVIDIA fixes 36 vulnerabilities

NVIDIA fixes 36 vulnerabilities (since May 2026) in various products. The most severe ones are described below, the rest can be found in the vendor's official security bulletin [1]. NVIDIA NVTabular - 08e0633 [2] Isaac Launchable - 1.2 [3] NVIDIA Merlin Transformers4Rec - any commit in the main branch after 11 March 2026 [4] Triton Inference Server (Linux) - r26.03 [5] Triton Inference Server (DALI Backend) - r26.03 [5] TensorRT-LLM - v1.2.1 [6] NVIDIA GPU Display Drivers - a list of fixed versions can be found at [7] TensorRT - v10.16.1 [8] DGX Spark - OTA0 [9] BioNeMo Framework (Linux) - any code branch that includes commit dfd83a7 [10]

NVIDIA Triton Inference Server - RCE, DoS, data tampering (CVE-2026-24207)
CVSS 9.8 (Critical)

An unauthenticated remote attacker can bypass authentication in the NVIDIA Triton Inference Server platform and subsequently escalate their privileges, tamper with data, gain access to information and cause a DoS or achieve RCE [5].

The vulnerability is present in product:

  • Linux:Triton Inference Server; <r26.03;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 19. 5. 2026.

NVIDIA BioNeMo Framework - RCE, DoS, data tampering (CVE-2026-24217)
CVSS 8.8 (High)

An unauthenticated remote attacker can exploit a path traversal vulnerability in the NVIDIA BioNeMo Core for Linux framework to gain access to information, tamper with data and achieve RCE or DoS [10].

The vulnerability is present in product:

  • Linux:BioNeMo Framework; <commit dfd83a7;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 19. 5. 2026.

NVIDIA GPU Display Drivers - DoS, PE, RCE, data tampering (CVE-2026-24187)
CVSS 8.8 (High)

An authenticated local attacker can exploit a use-after-free vulnerability in the NVIDIA Display Driver for Linux to escalate their privileges, gain access to information, tamper with data and achieve ACE or DoS [7]. Affected products and their versions can be found at [7].

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 19. 5. 2026.

NVIDIA DGX Spark - RCE, DoS, EoP, data tampering (CVE-2026-24218)
CVSS 8.1 (High)

An unauthenticated remote attacker can carry out host identity spoofing or a MitM attack in the NVIDIA DGX OS operating system due to a vulnerability resulting from factory cloning of the base image, which causes identical SSH host keys to be deployed on multiple systems. An attacker can abuse the sharing of these cryptographic identifiers to escalate privileges, gain access to information, tamper with data and achieve RCE or DoS [9]

The vulnerability is present in product:

  • NVIDIA DGX OS:DGX Spark; <OTA0;

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 19. 5. 2026.

NVIDIA TensorRT - Data tampering, DoS (CVE-2026-24188)
CVSS 8.2 (High)

An unauthenticated remote attacker can perform an out-of-bounds memory write in the NVIDIA TensorRT library, thereby tampering with data and causing a DoS [8].

The vulnerability is present in product:

  • NVIDIA TensorRT; < v10.16.1;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

More information:

The vulnerability was publicly disclosed 19. 5. 2026.

By CESNET, z.s.p.o. Táňa Macháčková on 8. 6. 2026.

CESNET, z.s.p.o. Logo