CVE-2026-47624
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
NVIDIA DGX Spark contains a vulnerability in UEFI where a privileged local user can cause a CWE-693, potentially allowing bypass of administrator password protection in UEFI. Successful exploitation may allow an attacker to bypass password protections.
Risk Assessment
Risk of unauthorized access to UEFI settings, potentially enabling further system compromise.
Recommendation
Apply UEFI firmware updates provided by NVIDIA and restrict physical access to the system.
Other vulnerabilities in NVIDIA DGX Spark
See all- CVE-2026-47626High
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
- CVE-2026-24263High
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
- CVE-2026-24262High
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
- CVE-2026-24225Medium
NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could cause an out-of-bounds read. Successful exploitation might lead to information disclosure.
Original NVD description (English source)
NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi.