12,000 NVIDIA GPUs at Risk of Crashes From Unauthenticated DCGM Exporter Vulnerability
Unauthenticated attackers can crash GPU monitoring services and disrupt AI workloads via a high-severity vulnerability in widely deployed NVIDIA infrastructure tools.
Key points
- NVIDIA fixed CVE-2026-47483, a CVSS 8.2 vulnerability in DCGM Exporter that allows unauthenticated remote crashes.
- Research by Lava identified over 2,100 exposed servers and roughly 12,000 GPUs, including H100 and Blackwell models.
- The flaw permits attackers to exhaust server resources and disrupt AI workloads without credentials.
NVIDIA has addressed a high-severity vulnerability in its Data Center GPU Manager (DCGM) Exporter that allowed unauthenticated attackers to disrupt GPU monitoring and potentially halt AI workloads. The flaw, tracked as CVE-2026-47483, was rated 8.2 on the Common Vulnerability Scoring System (CVSS). According to Help Net Security, NVIDIA published a security bulletin on July 28, 2026, following responsible disclosure from security researchers at Lava.
The risk
DCGM Exporter is a monitoring tool that collects telemetry data such as utilization, memory usage, temperature, and power consumption from AI servers. The vulnerability in this component allows an attacker to send requests that exhaust server resources and crash the monitoring service. Because the attack requires no authentication, anyone with network access to the exposed endpoint can trigger the disruption. This could lead to the loss of visibility into infrastructure health and the interruption of active AI or machine learning workloads.
Who is exposed
According to Lava, the researchers discovered that thousands of DCGM Exporter endpoints were exposed to the public internet. Their scans identified more than 2,100 exposed GPU servers. These servers revealed telemetry from over 12,000 GPUs, including high-end models such as the H100, H200, and Blackwell series. The research noted that approximately 60% of the exposed GPUs reported 0% utilization during the scans. Additionally, 12,096 servers exposed further infrastructure details, including operating system versions, firmware information, and networking configurations.
Cost and compliance
The exposed infrastructure represents a significant financial asset. Lava estimated the value of the 12,000+ exposed GPUs at approximately $100 million. The exposure of detailed infrastructure data, such as OS and firmware versions, increases the attack surface for further exploitation. While the immediate impact of CVE-2026-47483 is service disruption, the lack of network segmentation that allowed these monitoring tools to be publicly accessible poses broader operational risks.
What should you do?
Organizations should verify that their DCGM Exporter instances are updated to the patched version released by NVIDIA. Administrators should audit their network configurations to ensure that monitoring endpoints are not accessible from the public internet and are restricted to internal management networks only.
Background: Security bulletins
Security bulletins document known vulnerabilities, not active attacks. You must map each advisory to your specific environment to determine relevance. Ignore the severity score and focus on the affected component, the exploit conditions, and whether your system exposes that component to untrusted input.
Read the full guide: Security Bulletins: How to Read Them Without Misinterpreting Risk
What to do and how to stay safe: NVIDIA
- Confirm that all instances of NVIDIA DCGM Exporter are updated to the latest version that addresses CVE-2026-47483.
- Review firewall rules and network access controls to ensure GPU monitoring endpoints are not exposed to the public internet.
- Scan internal networks for any DCGM Exporter instances that may be listening on public-facing interfaces.
- Monitor server logs for unusual resource exhaustion patterns or unauthorized access attempts to monitoring services.
Step-by-step guide: Zero-Day Vulnerabilities Meaning: How Unpatched Flaws Bypass Your Defenses
General security guidance from the Vector Tribune newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is CVE-2026-47483?
It is a high-severity vulnerability in NVIDIA’s DCGM Exporter that allows unauthenticated attackers to crash the monitoring service and disrupt GPU workloads.
Is there a fix available?
Yes, NVIDIA has fixed the vulnerability and published a security bulletin on July 28, 2026.
How many GPUs were found to be exposed?
Research by Lava identified telemetry from over 12,000 GPUs across more than 2,100 exposed servers.
