Hard-Coded Password in NVIDIA Infrastructure Controller for Linux
CVE-2026-65117 is a hard-coded password vulnerability in the NVIDIA Infrastructure Controller for Linux. An attacker on the same network segment could use this credential to access the component. A successful exploit could lead to data tampering, denial of service, and information disclosure. The flaw is rated as medium severity and affects the NVIDIA product. There are no known public exploits or proof-of-concept attacks.
What to do: Update the NVIDIA Infrastructure Controller for Linux to the latest version as recommended in NVIDIA's security bulletin. There are no specific mitigations other than patching.
| Product | Affected |
|---|---|
| NVIDIA Infrastructure Controller for Linux | — |
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure.
NVIDIA patches 14 vulnerabilities in its Infrastructure Controller, including a critical CVSS 9.8 hard-coded credentials flaw enabling unauthenticated remote privilege escalation.
NVIDIA patches 14 flaws in Linux Infrastructure Controller, including a critical CVSS 9.8 hardcoded credential issue.
Today 1.6K readers · 2.5K views · 781 reads · all time 189K views