GCVE - cpe:2.3:a:nvidia:dgx_spark:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nvidia:dgx_spark:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nvidia (`40c2793d-f37d-5eb8-a9a9-0c9926e4695b`)
Product	Dgx Spark (`020e76dd-3875-50c9-bc15-93034b069fb7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-24218`	vulnerable	2026-06-08 07:51:17.287623	Details available HIGH (8.1) NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems. The sharing of cryptographic identifiers across all similarly provisioned systems enables host impersonation or attacker-in-the-middle attacks. A successful exploit of this vulnerability might lead to code execution, data tampering, escalation of privileges, information disclosure, and denial of service. Published: 2026-05-20T17:43:16.886Z Updated: 2026-05-21T03:55:42.973Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2026-24218 https://www.cve.org/CVERecord?id=CVE-2026-24218 https://nvidia.custhelp.com/app/answers/detail/a_id/5835	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33200`	vulnerable	2026-06-08 07:19:01.894602	Details available LOW (2.3) NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused. A successful exploit of this vulnerability might lead to information disclosure. Published: 2025-11-25T18:00:51.222Z Updated: 2025-11-25T21:33:39.747Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-33200 https://www.cve.org/CVERecord?id=CVE-2025-33200 https://nvidia.custhelp.com/app/answers/detail/a_id/5720	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33199`	vulnerable	2026-06-08 07:19:01.894331	Details available LOW (3.2) NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior. A successful exploit of this vulnerability might lead to data tampering. Published: 2025-11-25T18:00:38.785Z Updated: 2025-11-25T21:23:03.253Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-33199 https://www.cve.org/CVERecord?id=CVE-2025-33199 https://nvidia.custhelp.com/app/answers/detail/a_id/5720	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33198`	vulnerable	2026-06-08 07:19:01.893837	Details available LOW (3.3) NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused. A successful exploit of this vulnerability might lead to information disclosure. Published: 2025-11-25T18:00:25.687Z Updated: 2025-11-25T21:07:34.785Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-33198 https://www.cve.org/CVERecord?id=CVE-2025-33198 https://nvidia.custhelp.com/app/answers/detail/a_id/5720	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33197`	vulnerable	2026-06-08 07:19:01.893574	Details available MEDIUM (4.3) NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service. Published: 2025-11-25T18:00:11.847Z Updated: 2025-11-25T21:02:01.516Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-33197 https://www.cve.org/CVERecord?id=CVE-2025-33197 https://nvidia.custhelp.com/app/answers/detail/a_id/5720	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33196`	vulnerable	2026-06-08 07:19:01.893300	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33195`	vulnerable	2026-06-08 07:19:01.892812	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33194`	vulnerable	2026-06-08 07:19:01.892531	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33193`	vulnerable	2026-06-08 07:19:01.892097	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33192`	vulnerable	2026-06-08 07:19:01.891600	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33191`	vulnerable	2026-06-08 07:19:01.891055	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33190`	vulnerable	2026-06-08 07:19:01.890530	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33189`	vulnerable	2026-06-08 07:19:01.890084	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33188`	vulnerable	2026-06-08 07:19:01.889570	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33187`	vulnerable	2026-06-08 07:19:01.887805	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.