CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 28, 2026, 5:23 AM ET)

What this means for you

This week: 3,075 CVEs published, 231 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,075; Show in the list
Critical, last 7 days: 231; Show in the list
Healthcare-tagged, last 7 days: 8; Show in the list
Known exploited (CISA KEV): 1,760; Show in the list

Showing CVEs that name the product nvidia:tensorrt_llm. Show all products

19 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2026-65120	High 7.1	NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. Assigned by nvidia	Oct 27, 2026
CVE-2026-24269	High 7.1	NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. Assigned by nvidia	Oct 27, 2026
CVE-2026-65119	High 8.4	NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. Assigned by nvidia	Oct 27, 2026
CVE-2026-24271	Medium 6.2	NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. Assigned by nvidia	Jul 14, 2026
CVE-2026-47475	Medium 6.2	NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. Assigned by nvidia	Jul 14, 2026
CVE-2026-47470	Medium 6.2	NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack. Assigned by nvidia	Jul 14, 2026
CVE-2026-24226	Medium 6.3	NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. Assigned by nvidia	Jul 14, 2026
CVE-2026-24259	Medium 6.4	NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. Assigned by nvidia	Jul 14, 2026
CVE-2026-24220	Medium 6.4	NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. Assigned by nvidia	Jul 14, 2026
CVE-2026-24234	Medium 6.8	NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. Assigned by nvidia	Jul 14, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.