Vulnerability intelligence

CVE-2026-24170

NVIDIA Unified Fabric Manager Enterprise - GA CWE-287

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.

CVSS Score

8.8

High

EPSS — Exploit Probability

0.3%

Riskier than 23% of all CVEs · checked 2026-10-11

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories