CVE-2026-65124

Published: Sep 22, 2026Modified: Sep 29, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection. A successful exploit of this vulnerability might lead to data tampering and denial of service.

Affected (1)

Products: Nvidia: Infra Controller

Nvidia

1 product

Infra Controller

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Infra Controller	version < 2.0.0

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

CWE-91

XML Injection (aka Blind XPath Injection)

The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.

References (3)

https://github.com/NVIDIA/product-security/tree/main/2026/5879

Source: psirt@nvidia.com

Patch

https://nvd.nist.gov/vuln/detail/CVE-2026-65124

Source: psirt@nvidia.com

US Government Resource

https://www.cve.org/CVERecord?id=CVE-2026-65124

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.