CVE-2026-24166
NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic key to extract information. A successful exploit of this vulnerability might lead to information disclosure and escalation of privileges.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.1
- CVSS vector
- CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS probability
- 0.15%
- CWE
- CWE-321
- Published
- 2026-08-25
- Last modified
- 2026-08-25
Affected products
- NVIDIA Unified Fabric Manager Enterprise - GA
- NVIDIA Unified Fabric Manager Enterprise - LTS 2025
- NVIDIA Unified Fabric Manager Enterprise - LTS 2024
- NVIDIA Unified Fabric Manager Enterprise - LTS 2023
Weakness type
Related vulnerabilities
- CVE-2026-87929 — MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key
- CVE-2026-79735 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-78486 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-78481 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-53939 — OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption
- CVE-2026-81821 — AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key
- CVE-2026-80167 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-80057 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...