CVE-2026-24186

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2026-24186 · US Government Resource
• nvidia.custhelp.com/app/answers/detail/a_id/5819 · Vendor Advisory
• cve.org/CVERecord · Third Party Advisory

nvflare のその他の脆弱性

• CVE-2026-24204中 6.5NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit …
• CVE-2026-24178緊急 9.8NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cau…
• CVE-2022-34668緊急 9.8NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivile…
• CVE-2022-31605緊急 9.8NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.…
• CVE-2022-31604緊急 9.8NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pi…