NVIDIA Infra Controller vulnerabilities

14 CVEs affecting NVIDIA Infra Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-65130, published 2026-09-22.

More from NVIDIA.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-65130, published 2026-09-22. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data…
• CVE-2026-65113, published 2026-09-22. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of…
• CVE-2026-65128, published 2026-09-22. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection. A successful exploit of this vulnerability might lead to code execution, data…
• CVE-2026-65115, published 2026-09-22. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of…
• CVE-2026-65112, published 2026-09-22. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of…
• CVE-2026-65125, published 2026-09-22. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause external control of a file name or path. A successful exploit of this vulnerability might lead to…
• CVE-2026-65114, published 2026-09-22. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead…
• CVE-2026-65124, published 2026-09-22. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection. A successful exploit of this vulnerability might lead to data tampering and denial…
• CVE-2026-65121, published 2026-09-22. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A successful exploit of this vulnerability might lead to…
• CVE-2026-65126, published 2026-09-22. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead…

Latest

• CVE-2026-65129, published 2026-09-22. High severity, CVSS 8.3. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information…
• CVE-2026-65127, published 2026-09-22. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information due to uncleared debug information. A successful exploit of…
• CVE-2026-65118, published 2026-09-22. Critical severity, CVSS 9.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information…
• CVE-2026-65117, published 2026-09-22. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data…