Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
Critical NVIDIA security updates patch multiple flaws in UFM and DGX Spark systems, addressing CVE-2026-24170 and CVE-2026-24262. #NVIDIA #SecurityUpdates #Cybersecurity #CVE202624170 #DGX https://securityonline.info/nvidia-security-updates-ufm-dgx/
Post summary
NVIDIA issues critical security updates that patch CVE-2026-24170 and CVE-2026-24262 in UFM and DGX Spark systems.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | nvidia | dgx_spark | - | - | - |
| OS | nvidia | dgx_spark_uefi | - | - | - |