Skip to content

NVIDIA · weakness class

Server-Side Request Forgery

15 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

  1. NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulne…CVE-2026-47618NVIDIA · CVSS 7.5 · 0.6% likely

    CWE-918

  2. NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of…CVE-2026-47617NVIDIA · CVSS 7.5 · 0.6% likely

    CWE-918

  3. NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerabilit…CVE-2026-47616NVIDIA · CVSS 7.5 · 0.6% likely

    CWE-918

  4. NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit o…CVE-2026-47615NVIDIA · CVSS 7.5 · 0.6% likely

    CWE-918

  5. NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disc…CVE-2026-47614NVIDIA · CVSS 7.5 · 0.6% likely

    CWE-918

  6. NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a mul…CVE-2026-47613NVIDIA · CVSS 7.5 · 0.6% likely

    CWE-918

  7. NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a craf…CVE-2026-65170NVIDIA · CVSS 8.6 · 0.4% likely

    CWE-918

  8. NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vuln…CVE-2025-33203NVIDIA · CVSS 7.6 · 0.3% likely

    CWE-918

  9. NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key m…CVE-2026-65101NVIDIA · CVSS 8.6 · 0.3% likely

    CWE-918

  10. NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacker could cause a server-side request forgery. A successful exploit of…CVE-2026-100962NVIDIA · CVSS 5.3 · 0.2% likely

    CWE-918

  11. NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to infor…CVE-2026-24242NVIDIA · CVSS 7.8 · 0.2% likely

    CWE-918

  12. NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A s…CVE-2026-24234NVIDIA · CVSS 6.8 · 0.2% likely

    CWE-918

  13. NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disc…CVE-2026-65120NVIDIA · CVSS 7.1 · 0.1% likelycovered by CyberSIXT

    CWE-9181 article

  14. NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disc…CVE-2026-24269NVIDIA · CVSS 7.1 · 0.1% likelycovered by CyberSIXT

    CWE-9181 article

  15. NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted…CVE-2026-24231NVIDIA · CVSS 6.3 · 0.1% likely

    CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.