NVIDIA UFM Ent Auth Bypass: Crafted HTTP May Yield Code Exec
CVE-2026-24170 Published on August 25, 2026
NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.
Vulnerability Analysis
Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
Weakness Type
What is an authentification Vulnerability?
When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
CVE-2026-24170 has been classified to as an authentification vulnerability or weakness.
Affected Versions
NVIDIA Unified Fabric Manager Enterprise - GA:- Version All GA versions prior to 6.24.1-5 is affected.
- Version All LTS versions prior to 6.23.20-3 is affected.
- Version All LTS versions prior to 6.19.15 is affected.
- Version All LTS versions prior to 6.15.17 is affected.