CVE-2026-24245
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A vulnerability in NVIDIA Megatron Bridge for Linux allows deserialization of untrusted data. An attacker could exploit this flaw to achieve code execution, privilege escalation, data tampering, and information disclosure.
Risk Assessment
The organization risks system takeover, data theft, and integrity compromise. This attack could lead to full compromise of the IT environment.
Recommendation
Apply the update provided by NVIDIA for the Megatron Bridge component immediately. Until the patch is deployed, restrict access to the vulnerable interface and monitor for suspicious activity.
Other vulnerabilities in NVIDIA Megatron Bridge
See all- CVE-2026-61779High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
- CVE-2026-61778High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
- CVE-2026-61777High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
- CVE-2026-61776High
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
- CVE-2026-61775High
NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.
- CVE-2026-61774High
NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.
- CVE-2026-61773High
NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.
- CVE-2026-61772High
NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.
- CVE-2026-61771High
NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.
- CVE-2026-61770High
NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.
Original NVD description (English source)
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS