NVIDIA Connectx-4 vulnerabilities

2 CVEs affecting NVIDIA Connectx-4, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-23351, published 2026-07-01.

More from NVIDIA.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-23351, published 2026-07-01. Critical severity, CVSS 9.0. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful…
• CVE-2025-23262, published 2025-09-04. Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this…