vciy

NVIDIA Megatron Bridge: 30 records in one advisory

30 records announced together, published 2026-09-01, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://github.com/NVIDIA/product-security/tree/main/2026/5868. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

Held sources describe every record in this batch identically. Nothing but the identifier and the publication time separates one from another here.

Most commonly mapped weakness across the batch: CWE-502 Deserialization of Untrusted Data.

What this page does not cover

Every record citing this advisory is on this page.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2026-61750no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61751no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61752no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61753no title heldCWE-22 Improper Limitation of a Pathname to a…
CVE-2026-61754no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61755no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61756no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61757no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61758no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61759no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61760no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61761no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61762no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61763no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61764no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61765no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61766no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61767no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61768no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61769no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61770no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61771no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61772no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61773no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61774no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61775no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61776no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61777no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61778no title heldCWE-502 Deserialization of Untrusted Data
CVE-2026-61779no title heldCWE-502 Deserialization of Untrusted Data

30 records, read from the index as it stood on 2026-10-18. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.