NVIDIA Fixes Linux Component Flaws That Could Expose Sensitive System Information
NVIDIA patches 14 flaws in Linux Infrastructure Controller, including a critical CVSS 9.8 hardcoded credential issue.
NVIDIA released a security update for its Infrastructure Controller software for Linux, addressing 14 vulnerabilities. The most critical flaw, CVE-2026-65113 (CVSS 9.8), involves hardcoded credentials that could allow a remote, unauthenticated attacker to gain elevated privileges. Other high-severity issues include SQL injection (CVE-2026-65128), OS command injection (CVE-2026-65130), and missing authentication. The update affects versions 0 through 1.9, and organizations are advised to upgrade to version 2.0 or later.
- NVIDIA patched 14 vulnerabilities in Infrastructure Controller for Linux.
- Critical flaw CVE-2026-65113 allows remote code execution via hardcoded credentials (CVSS 9.8).
- SQL injection (CVE-2026-65128) and OS command injection (CVE-2026-65130) also patched.
- Organizations must update to version 2.0 or later.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-65113 | Hard-Coded Credentials in NVIDIA Infrastructure Controller for Linux | 9.8 group max | — |
From the original article
3 min read at cybersecuritynews.com
NVIDIA released a security update for its Infrastructure Controller software for Linux, addressing 14 vulnerabilities that could let attackers access sensitive system information, execute code, alter data, or disrupt affected environments. The update, published in NVIDIA’s September 2026 Infrastructure Controller security bulletin, affects versions 0 through 1. 9.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.