CVE-2026-47626: High severity vulnerability
Published Aug 25, 2026
·Updated
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Event History
Aug 25, 2026
CVE Published
via MITRE·04:10 PM
Data Sourced
via MITRE·04:10 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
Exploitation requires local access and high privileges. The provided vector does not indicate that remote or unauthenticated attackers can exploit it.
2
What impact could a successful exploit have?
A successful exploit may enable code execution, privilege escalation, denial of service, information disclosure, and data tampering. The vulnerability is in system firmware and involves an out-of-bounds write.