CVE-2026-47624: NVIDIA Dgx Spark UEFI

Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi.

Affected products

• NVIDIA Dgx Spark UEFI: before 1.110.13 (fixed in 1.110.13)

Published 2026-08-25. Last modified 2026-09-09.