First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-65110

HighCVSS 7.8/10Last modified Oct 13, 2026

Description

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
NVIDIA	Megatron-LM	0 to 17

References

Timeline

Published: Oct 13, 2026
Last modified: Oct 13, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-651117.8NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A s CVE-2026-651126.5NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A succe CVE-2026-651139.8NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successfu CVE-2026-651149.8NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical func CVE-2026-651156.5NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A success CVE-2026-651178.8NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful CVE-2026-651189.8NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A success CVE-2026-651198.4NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusi CVE-2026-65129.1The InfusedWoo Pro plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.2. This is due to th CVE-2026-651207.1NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulne CVE-2026-651219.8NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A succe CVE-2026-651225.5NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may l

CVE-2026-65110: High severity, CVSS 7.8 | Vulnix