CVE-2026-65114

Analyzed Analyzed - Analysis Complete

Missing Authentication in NVIDIA Infrastructure Controller for Linux

Publication date: 2026-09-22

Last updated on: 2026-09-29

Assigner: NVIDIA Corporation

Description

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-09-29

Generated

2026-10-13

AI Q&A

2026-09-22

EPSS Evaluated

2026-10-11

NVD

CVE-2026-65114

EUVD

EUVD-2026-84418

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	infra_controller	to 2.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

NVIDIA Infrastructure Controller for Linux has a vulnerability that allows an attacker to bypass authentication for critical functions. This could lead to unauthorized data tampering, service disruption, or exposure of sensitive information.

Detection Guidance

Detection methods for this vulnerability are not specified in the provided CVE data. NVIDIA Infrastructure Controller for Linux may require manual inspection of authentication mechanisms and logs for anomalies. Check NVIDIA's official security advisories for updates or tools.

Impact Analysis

An attacker could exploit this to alter data, crash systems, or steal information. Systems using NVIDIA Infrastructure Controller for Linux are at risk if not patched.

Compliance Impact

This vulnerability could lead to data tampering, denial of service, and information disclosure, which may violate compliance requirements under GDPR (data integrity and confidentiality) and HIPAA (protected health information security).

Mitigation Strategies

Apply the latest security patches from NVIDIA for the Infrastructure Controller for Linux. Monitor NVIDIA's security advisories for updates and restrict network access to the controller to trusted sources only.

Hi! I’m here to help you understand CVE-2026-65114. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70