NVIDIA Unified Fabric Manager Enterprise - LTS 2023

• CVE-2026-24166 Medium 5.1 NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic key to extract information. A successful exploit of this vuln 0.2%
• CVE-2026-24168 Medium 6.8 NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause command injection by sending crafted API requests. A succes 2.8%
• CVE-2026-24167 Medium 6.8 NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands by sending a crafted API request. A successful exploit of th 0.4%
• CVE-2026-24169 High 8.0 NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API request. A successful 0.5%
• CVE-2026-24170 High 8.8 NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. 0.5%