CVE-2026-65114

The vulnerability in NVIDIA Infrastructure Controller for Linux is a missing authentication flaw (CWE-306) for a critical function. An attacker with network access can exploit this flaw without authentication. A successful exploit could lead to data tampering, denial of service, and information disclosure. Affected systems are those running the vulnerable component of the NVIDIA Infrastructure Controller for Linux. As of the advisory date, there are no known public exploits or reports of exploitation in the wild.

What to do: Upgrade to the patched version of NVIDIA Infrastructure Controller for Linux as specified in NVIDIA's security bulletin. If immediate patching is not possible, restrict network access to the affected component to limit exposure to authorized users only. Monitor logs for any suspicious activity related to the controller.