CVE-2026-24168

Published: Ago 25, 2026 Last Modified: Ago 25, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,8
Source: [email protected]
Attack Vector: adjacent_network
Attack Complexity: low
Privileges Required: high
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause command injection by sending crafted API requests. A successful exploit of this vulnerability may lead to code execution, escalation of privileges and information disclosure.

77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Confidentiality Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Applicable Platforms
Technologies: AI/ML
Likelihood of Exploit: High
View CWE Details
https://github.com/NVIDIA/product-security/tree/main/2026/5…
https://github.com/NVIDIA/product-security/tree/main/2026/5809
https://nvd.nist.gov/vuln/detail/CVE-2026-24168
https://nvd.nist.gov/vuln/detail/CVE-2026-24168
https://www.cve.org/CVERecord?id=CVE-2026-24168
https://www.cve.org/CVERecord?id=CVE-2026-24168