AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NvidiaCVE-2026-24240

Nvidia Megatron-Bridge: unsafe deserialization

Nvidia

CVE-2026-24240 · Published Jul 1, 2026 · updated Jul 2, 2026

High7.8
No fix yet
Nvidia advisory

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

Affected versions

PackageAffectedFixed in
Megatron-Bridge
Product
<= Versions 0.0 to 0.4.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-502

More Nvidia advisories

All Nvidia
Critical 9.8Jul 1Nvidia AIStore framework: authentication bypassCVE-2026-24270no fix yetHigh 7.8Jul 1Nvidia Megatron-Bridge: code executionCVE-2026-24246no fix yetHigh 7.8Jul 1Nvidia Megatron-Bridge: unsafe deserializationCVE-2026-24247no fix yetHigh 7.8Jul 1Nvidia Megatron-Bridge: code executionCVE-2026-24248no fix yetHigh 7.8Jul 1Nvidia Megatron-Bridge: unsafe deserializationCVE-2026-24249no fix yetHigh 7.8Jul 1Nvidia Megatron-Bridge: code executionCVE-2026-24250no fix yet