August 17, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-24252NVD

Vulnerability Summary

NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure.
Severity Level
HIGH(7.8)
Published Date
Jul 27, 2026
Last Modified
Jul 28, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.69%Probability
Root Weakness (CWE)
CWE-78: OS Command Injection ↗
The software constructs all or part of an OS command using externally-influenced input, but does not properly neutralize special elements.
CVSS v3.1 Base Metrics
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

External References