CVE-2026-24241

NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://nvd.nist.gov/vuln/detail/CVE-2026-24241	Third Party Advisory US Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5789	Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24241	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:nvidia:delegated_license_service::::::::
	cpe:2.3:a:nvidia:delegated_license_service::::::::

History

No history.

Information

Published : 2026-02-24 20:27

Updated : 2026-06-17 10:22

NVD link : CVE-2026-24241

Mitre link : CVE-2026-24241

CVE.ORG link : CVE-2026-24241

JSON object : View

Products Affected

nvidia

delegated_license_service

CWE

CWE-287

Improper Authentication

NVD-CWE-noinfo

{"id": "CVE-2026-24241", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24241", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-24T21:26:29.531581Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@nvidia.com", "affectedData": [{"vendor": "NVIDIA", "product": "DLS component of NVIDIA License System", "versions": [{"status": "affected", "version": "All versions prior to v3.6"}], "platforms": ["All(3.6)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "DLS component of NVIDIA License System", "versions": [{"status": "affected", "version": "All versions prior to v3.1.8"}], "platforms": ["All(3.1)"], "defaultStatus": "unaffected"}]}], "published": "2026-02-24T20:27:47.620", "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24241", "tags": ["Third Party Advisory", "US Government Resource"], "source": "psirt@nvidia.com"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5789", "tags": ["Vendor Advisory"], "source": "psirt@nvidia.com"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-24241", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-287"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure."}, {"lang": "es", "value": "NVIDIA Delegated Licensing Service para todas las plataformas de dispositivos contiene una vulnerabilidad donde un atacante podr\u00eda explotar un problema de autenticaci\u00f3n inadecuada. Un exploit exitoso de esta vulnerabilidad podr\u00eda conducir a la revelaci\u00f3n de informaci\u00f3n."}], "lastModified": "2026-06-17T10:22:49.273", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:delegated_license_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E71A2F87-5ED1-46C6-9984-439F7D48BACB", "versionEndExcluding": "3.1.8"}, {"criteria": "cpe:2.3:a:nvidia:delegated_license_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A14A3C30-1897-45C8-9FE1-763AEFD0B15E", "versionEndExcluding": "3.6.0", "versionStartIncluding": "3.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@nvidia.com"}