CVE-2026-24252

Katalog CVE

CVSS 7.8 · High EPSS 1,5%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada nvidia nemo. Skor CVSS 3.1 7.8 (High) menurut nvidia.com.

Deskripsi (NVD)

NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure.

Rincian

Terbit di NVD

27 Juli 2026

Terakhir diubah

4 September 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber nvidia.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nvidia.custhelp.com/app/answers/detail/a_id/5839 advisory vendor
• https://nvd.nist.gov/vuln/detail/CVE-2026-24252 pemerintah AS · advisory pihak ketiga
• https://www.cve.org/CVERecord?id=CVE-2026-24252 advisory pihak ketiga