Nvidia
Curated coverage and analysis in this editorial area.
NVIDIA Megatron Bridge: User-Interaction RCE in Model Config YAML Parsing
ZDI-26-787 details a code-injection flaw in NVIDIA Megatron Bridge's YAML config parser that yields arbitrary code execution. The offi…
NVIDIA TensorRT: ONNX Parsing Flaw Enables RCE with CVSS 7.8
CVE-2026-24268 strikes the ONNX parser in NVIDIA TensorRT.
NVIDIA Transformers4Rec: RCE with CVSS 4.3 — The Risk Scoring Gap
A deserialization flaw in NVIDIA Transformers4Rec enables remote code execution, yet the official CVE record rates it 4.3 MEDIUM with…
NVIDIA NVTabular: RCE via Pickle, CVE-2026-24237 Rated CVSS 7.8
A deserialization flaw in NVIDIA NVTabular enables remote code execution through malicious pickle files. User interaction is required;…