CVE-2026-65111

Description

NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.

Overview

State: PUBLISHED
Assigner (CNA): nvidia
CVSS severity: HIGH
CVSS score: 7.8 / 10
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Effective score: 7.8 / 10 HIGH source: CNA overview
CWE(s): CWE-77
Reserved: 2026-07-21
Published: 2026-09-22 14:03 UTC
Last updated: 2026-09-22 15:29 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65111.json
Linked Threat: CVE-2026-65111 — CVE-2026-65111

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-09-22 15:17:11 UTC
NVD last modified: 2026-09-22 19:37:36 UTC
NVD CVSS v3.1: 7.8 / 10 HIGH source: psirt@nvidia.com
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability subscore: 1.8 / 10
Impact subscore: 5.9 / 10

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-84404
Assigner: nvidia
Published: Sep 22, 2026, 2:03:59 PM
Updated: Sep 22, 2026, 3:29:40 PM
EUVD base score (CVSS 3.1): 7.8 / 10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EUVD-reported EPSS: 0.0000
Vendors: NVIDIA
Products: NeMo Speech (0.0 to 2.9)
Aliases: GHSA-2g8g-m865-fcjx

ENISA description: NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.

EUVD references (3)

Affected products (1)

Vendor	Product	Versions	Platforms
NVIDIA	NeMo Speech	`0.0 to 2.9` (affected)	All platforms

Vendor references (3)

References embedded in the original CVE record by the assigning CNA.

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

NVD-tagged references (3)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://github.com/NVIDIA/product-security/tree/main/2026/5885 psirt@nvidia.com
https://nvd.nist.gov/vuln/detail/CVE-2026-65111 psirt@nvidia.com
https://www.cve.org/CVERecord?id=CVE-2026-65111 psirt@nvidia.com

Remediations (10)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

Update Software, Mitigation M1051 - Enterprise | MITRE ATT&CK®

web:attack.mitre.org

This mitigation can be implemented through the following measures: Regular Operating System Updates Implementation: Apply the latest Windows security updates monthly using WSUS (Windows Server Update Services) or a similar patch management solution. Configure systems to check for updates automatically and schedule reboots during maintenance ...

2026-09-23 15:18 UTC
CVE-2026-65111: Nvidia NeMo Speech Command Injection - CVETodo

web:cvetodo.com

CVE-2026-65111 is a CVSS 7.8 Command Injection vulnerability in Nvidia NeMo Speech. Includes technical details, affected versions, and mitigation steps.

2026-09-23 15:18 UTC
Over 21,000 Microsoft Exchange Servers Remain Exposed to Active CVE ...

web:cybersecuritynews.com

Nearly 22,000 Microsoft Exchange servers worldwide are still running unpatched against CVE - 2026 -62911, a critical authentication bypass vulnerability that attackers can exploit to seize control of enterprise email infrastructure.

2026-09-23 15:18 UTC
vBulletin Unauthenticated RCE CVE-2026-61511 (CVSS 9.8), Working Public ...

web:kkm-mako.com

vBulletin, the forum software used by community sites worldwide, has a flaw ( CVE - 2026 -61511, severity 9.8) that lets anyone take over the server without logging in. A working exploit was published on July 27, 2026 , though no in-the-wild attacks have been confirmed. Versions up to 5.7.5 and 6.2.1 are affected; the fix is to update to 6.2.2 immediately.

2026-09-23 15:18 UTC
Public Exploit Lands for vBulletin's Pre-Auth RCE, CVE-2026-61511

web:latesthackingnews.com

A public proof-of-concept for the vBulletin RCE vulnerability CVE - 2026 -61511 is now live. Here's how the eval() injection works and who still needs to patch .

2026-09-23 15:18 UTC
Security Update Guide - Microsoft

web:msrc.microsoft.com

The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.

2026-09-23 15:18 UTC
Microsoft Patch Tracker (September 2026): Exploit-Ranked | Senserva

web:senserva.com

Every Microsoft security patch (KB) and the CVEs it fixes, with severity, CVSS, and CISA KEV status. Cross-linked to the CVE reference.

2026-09-23 15:18 UTC
CVE-2026-62911 Exchange Server Pre-Auth RCE - socprime.com

web:socprime.com

CVE - 2026 -62911 enables pre-auth RCE on Microsoft Exchange via NTLM relay, MRSProxy abuse, and arbitrary ASPX webshell deployment

2026-09-23 15:18 UTC
CVE-2026-65111 - NVIDIA NeMo Speech Code Injection…

web:vulmon.com

Vulnerability Summary NVIDIA NeMo Speech for all platforms has a code injection vulnerability. An attacker can craft malicious input to trigger this flaw, potentially resulting in code execution, information disclosure, and data tampering.

2026-09-23 15:18 UTC
Microsoft Exchange Vulnerability: What Admins Should Do

web:www.zscaler.com

Microsoft's August 2026 Patch Tuesday included a fix for CVE - 2026 -62911, a high-severity authentication bypass vulnerability affecting Exchange Server 2016, 2019, and Subscription Edition. The severity has a CVSS score of 8.0 from Microsoft. As of September 1, threat intelligence group Shadowserver has identified around 22,000 Exchange servers that remain unpatched and exposed to the internet ...

2026-09-23 15:18 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-65111.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-65111",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-22T15:29:33.063805Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-22T15:29:40.707Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "All platforms"
          ],
          "product": "NeMo Speech",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "0.0 to 2.9"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering."
            }
          ],
          "value": "NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "code execution, data tampering, information disclosure"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-22T14:03:59.044Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65111"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65111"
        },
        {
          "url": "https://github.com/NVIDIA/product-security/tree/main/2026/5885"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "NVIDIA PSIRT"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2026-65111",
    "datePublished": "2026-09-22T14:03:59.044Z",
    "dateReserved": "2026-07-21T17:12:30.490Z",
    "dateUpdated": "2026-09-22T15:29:40.707Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}