NVIDIA UFM Enterprise CVE-2026-24168

Three concrete prerequisites must all be satisfied: (1) Valid NVIDIA UFM Enterprise administrative credentials - the CVSS PR:H metric explicitly confirms that high-privilege authentication is mandatory; this is not inferred from description text alone. (2) Network adjacency to the UFM management interface - AV:A means the attacking host must reside on the same local network segment or VLAN as the UFM server; internet-based attackers cannot reach the endpoint without first pivoting through an internal system. (3) The IBDiagnet API must be accessible - as a core diagnostic component of UFM, it is expected to be enabled in standard deployments rather than requiring special activation. Exploitation is meaningfully limited by the high-privilege credential requirement (eliminating unauthenticated and low-privilege attack paths) and the adjacency constraint (eliminating remote internet exploitation without a prior foothold). There is no indication of a user-interaction requirement or configuration toggle beyond standard UFM administrative access.

The CVSS 3.1 base score of 6.8 reflects a meaningful reduction from the high C/I/A impact due to two compounding barriers: administrative authentication (PR:H) and network adjacency (AV:A). Real-world exploitation requires an actor who already holds UFM administrative credentials and is positioned on the management network segment - a threat model that applies primarily to insider threats, compromised jump hosts, or post-pivot lateral movement rather than opportunistic internet-facing attacks. EPSS data is absent from the available intelligence, so exploitation probability cannot be quantified statistically. No CISA KEV listing exists, and no public POC has been identified, both consistent with a vulnerability that demands high-privilege access and is unlikely to attract commodity exploitation. Despite the low-to-medium CVSS score, the technical impact class (code execution, privilege escalation, information disclosure on a fabric management platform) is significant for HPC and AI infrastructure operators where UFM controls critical interconnect fabric. CVSS and description are fully consistent - no conflicting signals detected.

An attacker who has obtained valid administrative credentials to NVIDIA UFM Enterprise - whether through credential theft, phishing, or reuse from another compromised system - connects from a host on the management network segment and crafts an API request to the IBDiagnet endpoint with shell metacharacters or command separators injected into a request parameter. The UFM service passes the unsanitized input to a system command interpreter, executing the attacker's payload with the privileges of the UFM process, enabling privilege escalation, lateral movement within the InfiniBand fabric management plane, or exfiltration of fabric topology and credential data. No public exploit code is known at time of analysis.