Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and information disclosure.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-16 | 1 | Disclosure1 |
| 2026-06-17 | 1 | Patch1 |
Three NVIDIA NeMo vulnerabilities (CVE-2026-24155, CVE-2026-24252, CVE-2026-24228) enable code execution. Update NeMo Framework to v2.7.3 now. #NVIDIA #NeMo #CVE202624155 #AISecurity #InfoSec https://securityonline.info/nvidia-nemo-vulnerabilities https://t.co/93wJfksSbS
Post summary
The tweet announces three code‑execution vulnerabilities in NVIDIA NeMo and urges users to patch by upgrading to version 2.7.3.
CVE-2026-24228 NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may… https://www.cve.org/CVERecord?id=CVE-2026-24228
Post summary
The statement announces a previously reported vulnerability (CVE‑2026‑24228) in NVIDIA NeMo, noting it allows deserialization of untrusted data, but provides no further technical or exploit details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nvidia | nemo | - | - | - |