Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 3 products
CVE-2026-24186 NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A succ… https://www.cve.org/CVERecord?id=CVE-2026-24186
Post summary
The post announces a new deserialization vulnerability (CVE-2026-24186) in NVIDIA FLARE SDK's FOBS component, with no mention of PoC, exploit code, active exploitation, or patch.
⚠️ HIGH — CVE-2026-24186 NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by se… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-24186 #NVIDIA #CyberSecurity #InfoSec
Post summary
The post announces a new high‑severity vulnerability (CVE‑2026‑24186) in NVIDIA FLARE SDK that permits deserialization of untrusted data, but no PoC, exploit, patch, or active exploitation evidence is provided.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| OS | linux | linux_kernel | - | - | - |
| App | nvidia | nvflare | - | - | - |