CVE-2026-24170
Received Received - Intake

Improper Authentication in NVIDIA UFM Enterprise

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: NVIDIA Corporation

Description
NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-24170
EUVD
EUVD-2026-65608

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
nvidia ufm_enterprise to 6.24.1-5 (exc)
nvidia ufm_enterprise to 6.23.20-3 (exc)
nvidia ufm_enterprise to 6.19.15 (exc)
nvidia ufm_enterprise to 6.15.17 (exc)
nvidia ufm_enterprise *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

NVIDIA UFM Enterprise has a flaw in its web interface authorization component. An authenticated user can send specially crafted HTTP requests to bypass authentication. This improper authentication could allow code execution and privilege escalation.

Detection Guidance

To detect this vulnerability, monitor HTTP traffic for unusual requests targeting the NVIDIA UFM Enterprise web interface. Check for authentication bypass attempts or privilege escalation patterns. Review logs for failed authentication attempts or unexpected code execution events.

Impact Analysis

An attacker with access could exploit this to gain unauthorized control over the system, execute malicious code, or escalate privileges. This may lead to data breaches, system compromise, or further network infiltration.

Compliance Impact

This vulnerability could lead to unauthorized access, data breaches, or loss of sensitive information, violating GDPR and HIPAA requirements for data protection and access control.

Mitigation Strategies

Immediately update NVIDIA UFM Enterprise to versions 6.24.1-5 or later for GA, 6.23.20-3 for LTS 2025, 6.19.15 for LTS 2024, or 6.15.17 for LTS 2023. Restrict access to the web interface and implement network-level controls to limit exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-24170. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart