CVE-2026-47624
Received Received - Intake

UEFI Administrator Password Bypass in NVIDIA DGX Spark

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: NVIDIA Corporation

Description
NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-47624
EUVD
EUVD-2026-65606

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nvidia dgx_spark From 0 (inc) to 1.110.12 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-693 The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in NVIDIA DGX Spark's UEFI firmware. It allows a privileged local attacker to bypass administrator password protection in UEFI due to a protection mechanism failure (CWE-693).

Detection Guidance

Detection of CVE-2026-47624 requires checking the UEFI firmware version of NVIDIA DGX Spark systems. Use the system's firmware update utility or BIOS interface to verify the current UEFI version. Compare it against the patched versions (1.110.12 or later) as specified in NVIDIA's advisory. No direct commands are provided in the context for detection.

Impact Analysis

An attacker with local access could bypass UEFI password protection, potentially gaining unauthorized control over the system. This could lead to data theft, malware installation, or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements for GDPR and HIPAA. Organizations may face penalties for failing to protect personal or health information.

Mitigation Strategies

Update DGX Spark UEFI firmware to version 1.110.12 or later as recommended by NVIDIA. Restrict physical and administrative access to systems to prevent privileged local attacks. Monitor NVIDIA's security advisories for additional patches or mitigations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47624. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart