NVIDIA NVOS (network switches): With PKA-only SSH mode enabled, an administrator can inadvertently leave an alternative

CVSS 7.1CVE-2026-24185NVIDIA / GPU stackcurated

Impact

With PKA-only SSH mode enabled, an administrator can inadvertently leave an alternative authentication path open. If the default password was never changed, that path grants unauthorised switch access - so the switch looks key-only while still accepting a known password.

Who can reach it

Network, adjacent, low privileges. The exposure only exists where the default password survived deployment, which is exactly the switch nobody revisited after racking.

What to do

Update NVOS per bulletin 5817 and, more importantly, verify that no switch still holds a default password - the configuration audit matters more than the patch here. Cost: switch reboot for the upgrade; the password audit costs nothing and should happen today.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24185 https://github.com/NVIDIA/product-security/tree/main/2026/5817

Related entries

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.