NVIDIA has released urgent security updates to address multiple vulnerabilities affecting its UFM Enterprise and DGX Spark systems. A total of 10 CVEs were identified, with 5 rated as high severity. The highest severity CVE, CVE-2026-24170, has a CVSS score of 8.8 and involves a potential for code execution and privilege escalation. None of the vulnerabilities have been confirmed as actively exploited. Organizations are advised to apply the latest security patches immediately to safeguard their systems. The UFM vulnerabilities affect versions prior to 6.24.1-5, while DGX Spark affects UEFI versions up to 1.110.12.
NVIDIA issues patches for UFM and DGX Spark after CVE-2026-24170
CyberSIXT Evidence Panel
Article by CyberSIXT