CVE-2026-100962: SSRF
Published Nov 10, 2026
·Updated
NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might cause information disclosure.
Affected Software
1 affected component
Nvidia NeMo Export-Deploy
Event History
Nov 10, 2026
CVE Published
via MITRE·12:58 PM
Data Sourced
via MITRE·12:58 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is remotely exploitable without privileges or user interaction, as indicated by the network attack vector and PR:N/UI:N metrics. It affects multimodal deployment functionality in NVIDIA NeMo Export-Deploy on all platforms.
2
What is the likely impact of a successful exploit?
A successful exploit can cause server-side request forgery and may disclose information. The provided metrics indicate confidentiality impact is limited, with no stated integrity or availability impact.