NVIDIA NVOS Vulnerability in SSH Server Configuration for Network Switches

CVE-2026-24185

What is CVE-2026-24185?

The NVOS software for NVIDIA network switches is vulnerable due to a misconfiguration in the secure shell (SSH) server component when the PKA-only mode is enabled. If administrators do not adhere to the best practices for changing the default password, this can result in an alternative authentication pathway being inadvertently activated. This misconfiguration poses a risk of unauthorized access and potential privilege escalation, highlighting the importance of following security protocols to mitigate such vulnerabilities.

References