CVE-2026-65128
Received Received - Intake

SQL Injection in NVIDIA Infrastructure Controller for Linux

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: NVIDIA Corporation

Description
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-22
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
CVE-2026-65128
EUVD
EUVD-2026-84414

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nvidia infrastructure_controller *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

NVIDIA Infrastructure Controller for Linux has a vulnerability that allows an attacker to perform SQL injection. This could lead to unauthorized code execution, data tampering, denial of service, and information disclosure.

Impact Analysis

If exploited, this vulnerability could allow attackers to execute malicious code, alter or delete data, disrupt services, or steal sensitive information from systems running the affected NVIDIA Infrastructure Controller.

Compliance Impact

This vulnerability could lead to data breaches, unauthorized access, or data tampering, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations must address it to maintain data protection and regulatory adherence.

Mitigation Strategies

Apply the latest security patches or updates provided by NVIDIA for the Infrastructure Controller for Linux. Monitor NVIDIA's security advisories for patches and follow their recommended mitigation steps.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65128. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart