CVE-2026-24185
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
NVIDIA NVOS for network switches contains a vulnerability in the SSH server configuration when PKA-only mode is enabled. An administrator may inadvertently enable an alternative authentication path, which, if default passwords are not changed, could lead to unauthorized access and privilege escalation.
Risk Assessment
The risk includes potential unauthorized access to the switch and privilege escalation, which could compromise the entire network.
Recommendation
It is recommended to change default passwords and review SSH configuration, as well as apply NVIDIA patches.
Original NVD description (English source)
NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is enabled, where an administrator could inadvertently enable an alternative authentication path. If best practices for replacing the default password as recommended by NVIDIA are not followed, this alternative authentication path might lead to unauthorized access. A successful exploit of this vulnerability might lead to escalation of privileges.