CVE-2026-47483

HIGH

Nvidia Dcgm - Allocation of Resources Without Limits or Throttling

Title source: rule

Description

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service and information disclosure.

References (3)

Core 3

Core References

https://nvd.nist.gov/vuln/detail/CVE-2026-47483

https://www.cve.org/CVERecord?id=CVE-2026-47483

https://github.com/NVIDIA/product-security/tree/main/2026/5857

View Writeup ZIP pw:eip

Scores

CVSS v3 8.2

EPSS 0.0031

EPSS Percentile 23.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-770

Status published

Products (2)

NVIDIA/DCGM 0.0 to 4.5.2

NVIDIA/DCGM Exporter 0.0 to 4.8.2

Published Jul 28, 2026

Tracked Since Jul 28, 2026