CVE-2026-65126

Published: Sep 22, 2026Modified: Sep 29, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure.

Affected (1)

Products: Nvidia: Infra Controller

1 product

Infra Controller

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Infra Controller	version < 2.0.0

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

Improper Enforcement of Behavioral Workflow

The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence.

References (3)

https://github.com/NVIDIA/product-security/tree/main/2026/5879

Source: psirt@nvidia.com

Patch

https://nvd.nist.gov/vuln/detail/CVE-2026-65126

Source: psirt@nvidia.com

US Government Resource

https://www.cve.org/CVERecord?id=CVE-2026-65126

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.