CVE-2026-24243
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
A vulnerability in NVIDIA Megatron Bridge for Linux allows deserialization of untrusted data. An attacker could exploit this flaw to achieve code execution, privilege escalation, data tampering, and information disclosure.
Risk Assessment
The organization risks system compromise, sensitive data theft or modification, and overall IT infrastructure integrity breach.
Recommendation
Apply the patch provided by NVIDIA for NVIDIA Megatron Bridge immediately. Until then, restrict access to the vulnerable component and monitor for unusual activity.
Other vulnerabilities in NVIDIA Megatron Bridge
See all- CVE-2026-24251High
A vulnerability in NVIDIA Megatron Bridge for Linux allows an attacker to improperly control dynamically managed code resources. Successful exploitation could lead to code execution, privilege escalation, data tampering, and information disclosure.
- CVE-2026-24250High
A vulnerability in NVIDIA Megatron Bridge for Linux allows an attacker to cause improper validation of allowed inputs. Successful exploitation could lead to code execution, privilege escalation, data tampering, and information disclosure.
- CVE-2026-24249High
The NVIDIA Megatron Bridge for Linux contains a vulnerability that allows deserialization of untrusted data. Successful exploitation could lead to code execution, privilege escalation, data tampering, and information disclosure.
- CVE-2026-24248High
A vulnerability in NVIDIA Megatron Bridge for Linux allows an attacker to cause improper control of code generation. This could lead to code execution, privilege escalation, data tampering, and information disclosure.
- CVE-2026-24247High
A vulnerability in NVIDIA Megatron Bridge for Linux allows deserialization of untrusted data. An attacker could exploit this flaw to achieve code execution, privilege escalation, data tampering, and information disclosure.
- CVE-2026-24246High
A vulnerability in NVIDIA Megatron Bridge for Linux allows an attacker to improperly control dynamically managed code resources. Successful exploitation could lead to code execution, privilege escalation, data tampering, and information disclosure.
- CVE-2026-24245High
A vulnerability in NVIDIA Megatron Bridge for Linux allows deserialization of untrusted data. An attacker could exploit this flaw to achieve code execution, privilege escalation, data tampering, and information disclosure.
- CVE-2026-24244High
A vulnerability in NVIDIA Megatron Bridge for Linux allows deserialization of untrusted data. An attacker could exploit this flaw to achieve code execution, privilege escalation, data tampering, and information disclosure.
- CVE-2026-24242High
A vulnerability in NVIDIA Megatron Bridge for Linux allows an attacker to perform server-side request forgery (SSRF). Successful exploitation of this flaw could lead to information disclosure.
- CVE-2026-24240High
A vulnerability in NVIDIA Megatron Bridge for Linux allows deserialization of untrusted data. An attacker could exploit this flaw to achieve code execution, privilege escalation, data tampering, and information disclosure.
Original NVD description (English source)
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.