CVE-2026-24240

Published: Jul 1, 2026Modified: Jul 2, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

Affected (1)

Products: Nvidia: Nemo Megatron Bridge

1 product

Nemo Megatron Bridge

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Nemo Megatron Bridge	Before 0.4.1

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (3)

https://github.com/NVIDIA/product-security/tree/main/2026/5841

Source: psirt@nvidia.com

Product

https://nvd.nist.gov/vuln/detail/CVE-2026-24240

Source: psirt@nvidia.com

Third Party AdvisoryUS Government Resource

https://www.cve.org/CVERecord?id=CVE-2026-24240

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.