CVE-2026-24185

Published: Ago 18, 2026 Last Modified: Ago 18, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,1
Source: [email protected]
Attack Vector: adjacent_network
Attack Complexity: high
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is enabled, where an administrator could inadvertently enable an alternative authentication path. If best practices for replacing the default password as recommended by NVIDIA are not followed, this alternative authentication path might lead to unauthorized access. A successful exploit of this vulnerability might lead to escalation of privileges.

288

Authentication Bypass Using an Alternate Path or Channel

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Bypass Protection Mechanism
Applicable Platforms
Technologies: Not Technology-Specific, Web Based
View CWE Details
https://github.com/NVIDIA/product-security/tree/main/2026/5…
https://github.com/NVIDIA/product-security/tree/main/2026/5817
https://nvd.nist.gov/vuln/detail/CVE-2026-24185
https://nvd.nist.gov/vuln/detail/CVE-2026-24185
https://www.cve.org/CVERecord?id=CVE-2026-24185
https://www.cve.org/CVERecord?id=CVE-2026-24185