What is the CVSS score of CVE-2026-47477?

CVE-2026-47477 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.3%.

Which versions of Triton Inference Server are affected by CVE-2026-47477?

NVIDIA Triton Inference Server for Linux contains a remotely exploitable denial-of-service vulnerability (CVE-2026-47477) that could disrupt AI/ML inference operations for organizations relying on…

How to fix or mitigate CVE-2026-47477?

Within 24 hours, create an inventory of all systems running NVIDIA Triton Inference Server and assess their network exposure; isolate or air-gap production instances where feasible. Within 7 days, implement network-based compensating controls including strict firewall rules limiting Triton access to trusted internal sources only, enable rate limiting at the network perimeter, and deploy a web application firewall or load balancer with denial-of-service protections configured to detect and block malformed requests. Within 30 days, monitor NVIDIA security advisories and the NVD for patch availability; schedule immediate testing and deployment of the vendor patch upon release, prioritizing production Triton instances.

Triton Inference Server CVE-2026-47477

EUVD-2026-44426 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-07-14 nvidia

GHSA-cpvv-p5x5-22h6

Buffer Overflow Denial Of Service Stack Overflow Triton Inference Server Nvidia

7.5

CVSS 3.1 · Vendor: nvidia

Severity by source

Vendor (nvidia) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (nvidia) · only source for this CVE.

CVSS VectorVendor: nvidia

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 14, 2026 - 21:03 vuln.today

CVE Published

Jul 14, 2026 - 19:45 cve.org

HIGH 7.5

DescriptionCVE.org

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.

Articles & Coverage 1

News 14 New Nvidia Vulnerabilities - 14 High Severity, No POC Available Jul 15, 2026

AnalysisAI

Denial of service in NVIDIA Triton Inference Server for Linux stems from a stack-based buffer overflow (CWE-121) reachable by remote, unauthenticated attackers over the network. Per the CVSS 3.1 vector, exploitation requires no privileges or user interaction and impacts only availability (A:H), with no confidentiality or integrity effect. There is no public exploit identified at time of analysis, and the CVE is not listed in CISA KEV; no EPSS score was provided in the input.