Command Injection Vulnerability in NVIDIA UFM Enterprise
CVE-2026-24168
Key Information:
- Vendor
Nvidia
- Status
- Vendor
- CVE Published:
- 25 August 2026
What is CVE-2026-24168?
NVIDIA UFM Enterprise has a command injection vulnerability in its IBDiagnet API. An attacker with administrative credentials can exploit this vulnerability by submitting specially crafted API requests. If successfully executed, this can result in unauthorized code execution, allowing escalation of privileges and potential information leaks. Organizations using this product should implement immediate security measures to mitigate risks associated with this vulnerability. For further information, visit the references and ensure your system is updated.
Affected Version(s)
Unified Fabric Manager Enterprise - GA UFM Enterprise Appliance, UFM XDR Enterprise Appliance All GA versions prior to 6.24.1-5
Unified Fabric Manager Enterprise - LTS 2023 UFM Enterprise Appliance, UFM XDR Enterprise Appliance All LTS versions prior to 6.15.17
Unified Fabric Manager Enterprise - LTS 2024 UFM Enterprise Appliance, UFM XDR Enterprise Appliance All LTS versions prior to 6.19.15