6.4
CVE-2026-24259
- EPSS 0.14%
- Veröffentlicht 14.07.2026 20:06:25
- Zuletzt bearbeitet 15.07.2026 18:20:21
- CVE-Watchlists
- Unerledigt
NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerNVIDIA
≫
Produkt
TensorRT-LLM
Default Statusunaffected
Version <=
v1.3.0 rc12
Version
0.0
Status
affected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.14% | 0.036 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Nvidia | 6.4 | 0.5 | 5.9 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
|
CWE-306 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
https://nvd.nist.gov/vuln/detail/CVE-2026-24259
https://www.cve.org/CVERecord?id=CVE-2026-24259