CVE-2026-100962

MEDIUM 5.3

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might cause information disclosure.

CWE	CWE-918
Vendor	nvidia
Product	nemo deploy
Published	Nov 10, 2026

Stay Ahead of the Next One

Get instant alerts for nvidia nemo deploy

Be the first to know when new medium vulnerabilities affecting nvidia nemo deploy are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

NVIDIA / Nemo Deploy

0-0.7.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

nvd.nist.gov: https://nvd.nist.gov/vuln/detail/CVE-2026-100962 cve.org: https://www.cve.org/CVERecord?id=CVE-2026-100962 github.com: https://github.com/NVIDIA/product-security/tree/main/2026/5920