CVE-2026-24162

HighCVSS 7.8/10Last modified Jul 24, 2026

Description

NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
May 26, 2026
Last modified
Jul 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-241639.8NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successCVE-2026-241649.8NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerabiCVE-2026-241658.8NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerabiCVE-2026-241665.1NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic kCVE-2026-241676.8NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands CVE-2026-241686.8NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may causeCVE-2026-241698.0NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject coCVE-2026-24179.3A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow aCVE-2026-241708.8NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause impropeCVE-2026-241737.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the sCVE-2026-241747.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the sCVE-2026-241757.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request header t
CVE-2026-24162: High severity, CVSS 7.8 | Vulnix