NVIDIA Unified Fabric Manager Enterprise - LTS 2024 vulnerabilities

5 CVEs affecting NVIDIA Unified Fabric Manager Enterprise - LTS 2024, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-24170, published 2026-08-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-24168, published 2026-08-25. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause command injection by sending crafted API requests. A…
CVE-2026-24169, published 2026-08-25. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API request. A successful…
CVE-2026-24170, published 2026-08-25. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP…
CVE-2026-24167, published 2026-08-25. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands by sending a crafted API request. A successful exploit of…
CVE-2026-24166, published 2026-08-25. Medium severity, CVSS 5.1. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic key to extract information. A successful exploit of this…