Denial of Service Vulnerability in NVIDIA DCGM Exporter
CVE-2026-47483

8.2HIGH

Key Information:

Vendor

Nvidia
Status
Dcgm
Dcgm Exporter
Vendor
CVE Published:
28 July 2026

Badges

📈 Score: 190👾 Exploit Exists📰 News Worthy

What is CVE-2026-47483?

CVE-2026-47483 is a vulnerability located in the NVIDIA DCGM Exporter, which is a tool designed to facilitate the monitoring and management of NVIDIA GPU resources in data center environments. This vulnerability arises from the /debug/pprof endpoints in the exporter, where an attacker can exploit it by sending numerous unauthenticated profiling requests simultaneously. The result is uncontrolled resource consumption that can severely hinder the normal functioning of the system, leading to denial of service (DoS). This vulnerability poses a risk by not only disrupting service availability but also potentially allowing information disclosure, which can expose sensitive operational data to malicious users.

Potential impact of CVE-2026-47483

  1. Denial of Service (DoS): The most immediate impact of CVE-2026-47483 is the ability to create a denial of service condition, rendering the monitoring service ineffective. This poses a risk to organizations that rely on continuous access to GPU metrics for performance tracking and resource allocation, potentially leading to operational disruptions.

  2. Information Disclosure: Beyond just service disruption, the vulnerability may allow for the unintentional exposure of sensitive information. Attackers taking advantage of this flaw could retrieve valuable data that can be used for further attacks or to compromise systems.

  3. Resource Drain: Exploiting this vulnerability could result in excessive consumption of system resources, affecting not only the DCGM Exporter but also impeding the performance of other dependent systems. This can lead to increased operational costs and potential resource shortages impacting the overall infrastructure.

Affected Version(s)

DCGM All(4.5) 0.0 to 4.5.2

DCGM Exporter All(4.8) 0.0 to 4.8.2

News Articles

favicon imageWebpronews

NVIDIA's Exposed GPU Monitoring Flaw Leaves AI Servers Open to Silent Disruption

Lava researchers uncovered 2,100 exposed GPU servers broadcasting unauthenticated telemetry on over 12,000 accelerators worth $100 million. The high-severity CVE-2026-47483 in DCGM Exporter allows remote crashes via resource exhaustion, blinding operators to AI workload health. NVIDIA patched it in ...

2 days ago

favicon imageIt Security News

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring - IT Security News

2026-10-09 14:10 Hundreds of internet-exposed graphics processing unit (GPU) servers were open to a high-severity flaw in NVIDIA’s DCGM Exporter (CVE-2026-47483) that lets unauthenticated...

3 days ago

favicon imageHelp Net Security

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring - Help Net Security

Hundreds of exposed GPU servers were open to an NVIDIA DCGM Exporter vulnerability (CVE-2026-47483) that lets attackers crash GPU monitoring.

3 days ago

References

https://nvd.nist.gov/vuln/detail/CVE-2026-47483
https://www.cve.org/CVERecord?id=CVE-2026-47483
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by theregister

  • Vulnerability published

  • Vulnerability Reserved

.