Reported by 2 outlets
NVIDIA patched critical NVIDIA Infrastructure Controller vulnerabilities across Linux builds. Learn how CVE-2026-65113 impacts systems and u
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.00 / 2.0 · best outlet weight
- Severity
- 1.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.29 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Analysis
NVIDIA released Infrastructure Controller version 2.0 on September 22, 2026, patching 14 flaws across versions 0 through 1.9. The critical CVE-2026-65113 (CVSS 9.8) is a hard-coded credentials issue allowing unauthenticated remote compromise with no user interaction; CVE-2026-65128 is SQL injection. The weaknesses cover code execution, privilege escalation, data tampering, denial-of-service, and information disclosure. Management-plane exposure is significant because the controller has broad compute, networking, and lifecycle access. Upgrade or clone the latest GitHub release.
Watch for active scanning against unpatched instances. Hard-coded credential flaws in infrastructure software tend to attract rapid exploitation once public.
Timeline
-
original reporting
NVIDIA patched critical NVIDIA Infrastructure Controller vulnerabilities across Linux builds. Learn how CVE-2026-65113 impacts systems and u
securityonline.info · 21d ago · September 22nd, 2026
NVIDIA patched critical NVIDIA Infrastructure Controller vulnerabilities across Linux builds. Learn how CVE-2026-65113 impacts systems and u
via Mastodon https://securityonline.info/nvidia-infrastructure-controller-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social
-
update from cyberpress.org
NVIDIA Infrastructure Controller Hit by 14 Security Flaws Enabling Privilege Escalation and Code Execution
cyberpress.org · 20d ago · September 23rd, 2026
NVIDIA has released version 2.0 of its Infrastructure Controller to remediate 14 security vulnerabilities in the Linux-based infrastructure-management software, including a critical hard-coded credentials flaw that could enable remote compromise. The vulnerabilities affect versions 0 through 1.9, and NVIDIA is urging users to upgrade or clone the latest release from the project’s GitHub repository. NVIDIA’s security bulletin, issued on September 22, 2026, rates the flaws from medium to critical severity under CVSS v3.1. NVIDIA Infrastructure Controller Hit by 14 Security Flaws Collectively, the weaknesses could expose affected deployments to code execution, privilege escalation, data tampering, denial-of-service conditions , and information disclosure. The highest-rated issue, CVE-2026-65113, carries a CVSS score of 9.8. An unauthenticated remote attacker could exploit the flaw without user interaction, potentially gaining elevated privileges and access to sensitive information while also manipulating data or disrupting services. Hard-coded credentials are particularly dangerous in infrastructure-management software because such platforms commonly have broad access to compute, networking, and lifecycle-management functions. Compromising a management-plane component can give attackers a foothold to affect multiple managed systems. NVIDIA also addressed CVE-2026-65128, an SQL injection vulnera