NVIDIA NVSentinel for Linux 的平台连接器(platform-connectors)组件存在一个漏洞,其中通过全局可写的 Unix 域套接字暴露的 gRPC 健康事件接口缺乏身份验证机制。成功利用该漏洞可能导致拒绝服务(Denial of Service, DoS)。
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| NVIDIA | NVSentinel | 1.19.0 |
affected |
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| NVIDIA | NVSentinel | 1.19.0 | - |
|
| # | POC Description | Source Link | Shenlong Link |
|---|
No public POC found.
Login to generate AI POC| CVE-2026-65162 | 10.0 CRITICAL | NVIDIA AIStore ETL API远程代码执行漏洞 |
| CVE-2026-65173 | 9.1 CRITICAL | NVIDIA AIStore缺少认证漏洞 |
| CVE-2026-65172 | 8.6 HIGH | NVIDIA AIStore ETL API缺失授权漏洞 |
| CVE-2026-65170 | 8.6 HIGH | NVIDIA AIStore HT后端SSRF漏洞致信息泄露 |
| CVE-2026-65101 | 8.6 HIGH | NVIDIA AIStore 1.0.0分布式排序组件SSRF漏洞 |
| CVE-2026-65164 | 8.1 HIGH | NVIDIA AIStore 路径遍历漏洞 |
| CVE-2026-65103 | 8.1 HIGH | NVIDIA AIStore路径穿越致代码执行 |
| CVE-2026-65110 | 7.8 HIGH | NVIDIA Megatron-LM检查点加载远程代码执行漏洞 |
| CVE-2026-65180 | 7.8 HIGH | NVIDIA Megatron-LM 检查点加载 RCE 漏洞 |
| CVE-2026-65141 | 7.8 HIGH | NVIDIA Isaac Lab 评估注入漏洞 |
| CVE-2026-65161 | 7.5 HIGH | NVIDIA AIStore for Linux未授权文件读取漏洞 |
| CVE-2026-65150 | 7.3 HIGH | NVIDIA DALI越界读取漏洞致信息泄露及服务中断 |
| CVE-2026-65149 | 7.3 HIGH | NVIDIA DALI越界写入漏洞 |
| CVE-2026-65147 | 7.3 HIGH | NVIDIA DALI越界读取漏洞 |
| CVE-2026-65148 | 7.3 HIGH | NVIDIA DALI栈缓冲区溢出漏洞 |
| CVE-2026-65104 | 7.1 HIGH | NVIDIA Megatron-LM推理缓存哈希碰撞致数据篡改 |
| CVE-2026-67456 | 4.4 MEDIUM | NVIDIA Warp堆溢出漏洞 |
No comments yet