What is the CVSS score of CVE-2026-47476?

CVE-2026-47476 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.3%.

Which versions of Triton Inference Server are affected by CVE-2026-47476?

NVIDIA Triton Inference Server for Linux is vulnerable to remote denial-of-service attacks that exhaust server resources and crash model-serving endpoints, directly disrupting AI inference services…

How to fix or mitigate CVE-2026-47476?

Within 24 hours, identify all NVIDIA Triton Inference Server instances on Linux systems and enable continuous monitoring of resource utilization (CPU, memory, network) to establish baseline metrics and detect anomalous consumption patterns. Within 7 days, deploy network-layer rate limiting and request filtering upstream of Triton deployments, configure per-model and per-endpoint resource quotas within Triton configuration, restrict network access to Triton management and inference ports to only authorized clients using firewall or VPC rules, and enable detailed audit logging of all requests and resource events. Within 30 days, establish a patch testing environment and monitor NVIDIA's security advisory channels for an available fix; simultaneously, evaluate deployment of redundant or alternative inference-serving solutions to reduce single-point-of-failure risk while awaiting a vendor patch.

Triton Inference Server CVE-2026-47476

EUVD-2026-44411 HIGH

Uncontrolled Resource Consumption (CWE-400)

2026-07-14 nvidia

GHSA-cghx-jxvf-5p77

Denial Of Service Triton Inference Server Nvidia

7.5

CVSS 3.1 · Vendor: nvidia

Severity by source

Vendor (nvidia) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (nvidia) · only source for this CVE.

CVSS VectorVendor: nvidia

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 14, 2026 - 21:03 vuln.today

CVE Published

Jul 14, 2026 - 19:43 cve.org

HIGH 7.5

DescriptionCVE.org

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.

Articles & Coverage 1

News 14 New Nvidia Vulnerabilities - 14 High Severity, No POC Available Jul 15, 2026

AnalysisAI

Denial of service in NVIDIA Triton Inference Server for Linux allows remote unauthenticated attackers to trigger uncontrolled resource consumption, exhausting server resources and rendering the model-serving endpoint unavailable. The flaw carries a CVSS 7.5 with a pure availability impact and no confidentiality or integrity effect; it was reported by NVIDIA, and there is no public exploit identified at time of analysis. No special access is required, but the concrete resource-exhaustion trigger is not detailed in the available data.