CVE-2026-65117: Hard-Coded Password in NVIDIA Infrastructure Controller for Linux

NVIDIA Infrastructure Controller Hit by 14 Flaws Enabling Code Execution and Privilege Escalation

NVIDIA patches 14 vulnerabilities in its Infrastructure Controller, including a critical CVSS 9.8 hard-coded credentials flaw enabling unauthenticated remote privilege escalation.

NVIDIA released version 2.0 of its Infrastructure Controller to patch 14 vulnerabilities in its Linux-based management software. The most severe flaw, CVE-2026-65113, is a critical hard-coded credentials vulnerability with a CVSS score of 9.8 that allows unauthenticated remote attackers to escalate privileges, modify data, and disrupt services. The update also addresses high-severity issues like SQL injection (CVE-2026-65128) and missing authentication (CVE-2026-65114), among others affecting versions 0 through 1.9.

GBHackersSep 23, 09:25 UTC · 4d agoVulnerability CVE-2026-65113 CVE-2026-65128 CVE-2026-65114+11 CVEs

NVIDIA Fixes Linux Component Flaws That Could Expose Sensitive System Information

NVIDIA patches 14 flaws in Linux Infrastructure Controller, including a critical CVSS 9.8 hardcoded credential issue.

NVIDIA released a security update for its Infrastructure Controller software for Linux, addressing 14 vulnerabilities. The most critical flaw, CVE-2026-65113 (CVSS 9.8), involves hardcoded credentials that could allow a remote, unauthenticated attacker to gain elevated privileges. Other high-severity issues include SQL injection (CVE-2026-65128), OS command injection (CVE-2026-65130), and missing authentication. The update affects versions 0 through 1.9, and organizations are advised to upgrade to version 2.0 or later.

Cyber Security NewsSep 23, 11:05 UTC · 3d agoAdvisory CVE-2026-65113 CVE-2026-65128 CVE-2026-65114+11 CVEs

CVE-2026-65117

In the news2 stories

NVIDIA Infrastructure Controller Hit by 14 Flaws Enabling Code Execution and Privilege Escalation

NVIDIA Fixes Linux Component Flaws That Could Expose Sensitive System Information