NVIDIA Infrastructure Controller for Linux Exposes Hard-Coded Password Vulnerability
CVE-2026-65117

5MEDIUM

Key Information:

Vendor

Nvidia
Status
Infrastructure Controller
Vendor
CVE Published:
22 September 2026

What is CVE-2026-65117?

A vulnerability exists in the NVIDIA Infrastructure Controller for Linux where a hard-coded password could be exploited by an attacker. This could potentially lead to unauthorized data tampering, service disruption, and unauthorized access to sensitive information. Users of this software should take immediate action to mitigate risks associated with this security flaw.

Affected Version(s)

Infrastructure Controller Linux 0 to 1.9

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65117
https://www.cve.org/CVERecord?id=CVE-2026-65117
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.