CVE-2026-65113: Use of Hard-coded Credentials

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure...

CVE-2026-65112: Uncontrolled Resource Consumption

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-65121: Improper Authentication

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering...

CVE-2026-65124: XML Injection (aka Blind XPath Injection)

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection. A successful exploit of this vulnerability might lead to data tampering and denial of service...

Security Bulletin: NVIDIA Infrastructure Controller - September 2026

NVIDIA has released a software update for NVIDIA® Infrastructure Controller. To protect your system, clone or update this software to version 2.0 or later from NVIDIA/infra-controller on GitHub. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities th...

PT-2026-96746

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An improper authentication flaw exists that could allow an attacker to escalate privileges, disclose sensitive information, and tamper with data...

CVE-2026-65130: Improper Neutralization of Special Elements used in an OS Command

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

PT-2026-96752

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

PT-2026-96749

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An issue exists where an attacker could cause improper enforcement of a behavioral workflow. This could lead to data tampering, denial of service, and...

PT-2026-96753

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An issue exists that allows an attacker to perform OS command injection. This could lead to arbitrary code execution, data tampering, denial of service, and...

CVE-2026-65128: Improper Neutralization of Special Elements used in an SQL Command

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

PT-2026-96743

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service...

PT-2026-96748

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An issue exists where an attacker can achieve external control of a file name or path. This could lead to code execution, escalation of privileges, data...

PT-2026-96750

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An issue exists where uncleared debug information can be leveraged by an attacker to cause the exposure of sensitive system information, potentially leading...

PT-2026-96745

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An improper certificate validation flaw exists, which could allow an attacker to cause information disclosure, data tampering, and denial of service...

PT-2026-96744

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...

CVE-2026-65126: Improper Enforcement of Behavioral Workflow

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...

CVE-2026-65127: Exposure of Sensitive System Information Due to Uncleared Debug Information

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information due to uncleared debug information. A successful exploit of this vulnerability might lead to information disclosure...

PT-2026-96747

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection. A successful exploit of this vulnerability might lead to data tampering and denial of service...

PT-2026-96741

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description NVIDIA Infrastructure Controller for Linux contains hard-coded credentials that can be used to authenticate to the controller/management interface. An...