CVE-2026-24218

Katalog CVE

CVSS 8.1 · High EPSS 0,60%

Kerentanan Use of Hard-coded Cryptographic Key pada nvidia dgx os. Skor CVSS 3.1 8.1 (High) menurut nvidia.com.

Deskripsi (NVD)

NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems. The sharing of cryptographic identifiers across all similarly provisioned systems enables host impersonation or attacker-in-the-middle attacks. A successful exploit of this vulnerability might lead to code execution, data tampering, escalation of privileges, information disclosure, and denial of service.

Rincian

Terbit di NVD

20 Mei 2026

Terakhir diubah

23 Juli 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber nvidia.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-321: Use of Hard-coded Cryptographic Key

EPSS (30 hari)

0,60% peluang dieksploitasi; lebih tinggi dari 47,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nvidia.custhelp.com/app/answers/detail/a_id/5835 advisory vendor
• https://nvd.nist.gov/vuln/detail/CVE-2026-24218 pemerintah AS
• https://www.cve.org/CVERecord?id=CVE-2026-24218 advisory pihak ketiga