NVIDIA DCGM Exporter Bug Exposes GPU Servers to Resource Exhaustion Attacks
NVIDIA patched CVE-2026-47483 in DCGM Exporter, allowing unauthenticated attackers to exhaust GPU monitoring servers.
74
Vulnerability2 · 1 read
CVE-2026-47483
- CVSS 3.1
- 8.2 high
- EPSS
- <1%p23
- Published
- ·
- Modified
Description · NVD
NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
- Weakness
- CWE-770
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
In the news
5 storiesHigh-severity Nvidia bug could crash GPU monitoring on exposed servers
Nvidia patched CVE-2026-47483, a high-severity flaw that can crash exposed DCGM Exporter GPU monitoring.
68
In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
SecurityWeek roundup: PoeLLM botnet resolves C&C via GitHub poem, GhostAction hit 772 repos, CrowdStrike links Chinese actor to Korean bank breaches.
58
Exposed Nvidia GPU monitors can reveal AI infrastructure secrets
NVIDIA patched high-severity CVE-2026-47483 in DCGM Exporter; 2,000+ internet-exposed instances covering 12,000+ GPUs allowed unauthenticated DoS and reconnaissance.
55
High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring
Lava found 2,000+ internet-exposed NVIDIA DCGM Exporters covering 12,000+ GPUs across ~300 organizations, vulnerable to CVE-2026-47483 resource-exhaustion crashes.
55