CVE-2026-65130
HighCVSS 8.0Exploitation Probability (EPSS)
High risk81th percentile - higher than 81% of all known CVEs
Summary
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
Risk Assessment
An attacker may execute arbitrary operating system commands, potentially leading to system takeover, data tampering, denial of service, and information disclosure.
Recommendation
Upgrade NVIDIA Infrastructure Controller for Linux to a version containing the fix. Restrict access to the component and enforce input validation.
Other vulnerabilities in NVIDIA Infrastructure Controller for Linux
See all- CVE-2026-65113Critical
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure.
- CVE-2026-65128High
SQL injection vulnerability in NVIDIA Infrastructure Controller for Linux. An attacker could exploit it to achieve code execution, data tampering, denial of service, and information disclosure.
- CVE-2026-65126Medium
A vulnerability in NVIDIA Infrastructure Controller for Linux allows an attacker to cause improper enforcement of a behavioral workflow. Successful exploitation might lead to data tampering, denial of service, and information disclosure.
- CVE-2026-65125Medium
A vulnerability in NVIDIA Infrastructure Controller for Linux allows an attacker to cause external control of a file name or path. Successful exploitation might lead to code execution, privilege escalation, data tampering, and denial of service.
- CVE-2026-65124Medium
A vulnerability in NVIDIA Infrastructure Controller allows an attacker to cause an XML injection. Successful exploitation might lead to data tampering and denial of service.
- CVE-2026-65121High
Improper authentication in NVIDIA Infrastructure Controller for Linux. Could lead to privilege escalation, information disclosure, and data tampering.
- CVE-2026-65118High
Improper certificate validation in NVIDIA Infrastructure Controller for Linux. Could lead to information disclosure, data tampering, and denial of service.
- CVE-2026-65117Medium
A vulnerability in NVIDIA Infrastructure Controller for Linux involves the use of a hard-coded password. Successful exploitation might lead to data tampering, denial of service, and information disclosure.
- CVE-2026-65115Medium
A vulnerability in NVIDIA Infrastructure Controller allows an attacker to cause uncontrolled resource consumption. Successful exploitation may lead to denial of service.
- CVE-2026-65114High
Missing authentication for a critical function in NVIDIA Infrastructure Controller for Linux. Could lead to data tampering, denial of service, and information disclosure.
Original NVD description (English source)
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

