CVE-2026-65129

The NVIDIA Infrastructure Controller for Linux contains a vulnerability (CWE-295: Improper Certificate Validation) that could allow an attacker on the adjacent network to bypass security checks. A successful exploit could lead to information disclosure, data tampering, or denial of service. The vulnerability requires low privileges to exploit and has a medium severity (CVSS 6.7). No public proof-of-concept or in-the-wild exploitation is currently known. Affected users should apply the security update from NVIDIA.

What to do: Update NVIDIA Infrastructure Controller for Linux to the latest patched version provided by NVIDIA. If immediate patching is not possible, restrict network access to the vulnerable component.