CVE-2026-24246 HIGH

CVE-2026-24246

Vendor Nvidia
Product Megatron-Bridge
Weakness CWE-470
Published July 1, 2026
Last update July 1, 2026

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

Key dates

02Disclosure timeline

July 1, 2026 CVE published