NVIDIA UFM Enterprise Hard-Coded Key in Session Mgmt Exposes Privileges
CVE-2026-24166 Published on August 25, 2026
NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic key to extract information. A successful exploit of this vulnerability might lead to information disclosure and escalation of privileges.
Vulnerability Analysis
CVE-2026-24166 is exploitable with local system access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
Use of Hard-coded Cryptographic Key
The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
Affected Versions
NVIDIA Unified Fabric Manager Enterprise - GA:- Version All GA versions prior to 6.24.1-5 is affected.
- Version All LTS versions prior to 6.23.20-3 is affected.
- Version All LTS versions prior to 6.19.15 is affected.
- Version All LTS versions prior to 6.15.17 is affected.