CVE-2026-65094Patch

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

0.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 8 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 5 signals
  • Technical details provided in 7 signals
  • Disclosure: 3 classified signals
  • Peaked 3d ago at 3 mentions (2026-07-29); latest day: 1
  • 8 total mentions across 4 days

Deep dive

Activity timeline8 mentions / 4d
01223Mentions · 2026-07-29: 3Mentions · 2026-07-30: 3Mentions · 2026-08-06: 1Mentions · 2026-08-07: 1Patch / Workaround · 2026-07-29: 3Patch / Workaround · 2026-07-30: 1Patch / Workaround · 2026-08-06: 1Technical Details · 2026-07-29: 3Technical Details · 2026-07-30: 3Technical Details · 2026-08-06: 107-2907-3008-0608-07
Signal classification2 categories
Patch
562.5%
Disclosure
337.5%
Referenced assets7 URLs
Classification over time
DateTotalLabels
2026-07-293
Patch3
2026-07-303
Disclosure2Patch1
2026-08-061
Patch1
2026-08-071
Disclosure1
Full discourse8 posts
  • iototsecnews@iototsecnews
    Patch

    NVIDIA BlueField の脆弱性 CVE-2026-65094 が FIX:任意のコード実行の可能性 https://iototsecnews.jp/2026/07/29/nvidia-bluefield-vulnerability-enables-code-execution-attacks/ NVIDIA の BlueField DPU や ConnectX プラットフォームに存在する、VIRTIO-Net コンポーネントに起因する深刻な脆弱性 CVE-2026-65094 が公表されました。この問題は、仮想化ネットワークの処理系に存在するメモリ書き込みの不備によって生じています。悪用された場合、共有環境内の別コンポーネントへ影響が及び、不正なコード実行やデータの改竄が引き起こされる恐れがあります。対応策として、NVIDIA が提供する修正済みバージョンへの速やかな更新や、共有環境における不要なアクセス権限の制限が有効となります。システムを安全に利用するためにも、インフラの設定確認と最新版へのアップデートが必要となります。 #BlueField #CVE202665094 #NVIDIA #Vulnerability

    Post summary

    The article reports the disclosure of CVE‑2026‑65094 affecting NVIDIA BlueField DPU, details the memory‑write vulnerability, and emphasizes immediate patching and access‑restriction mitigations.

    01000171
    506 followersView on X
  • TECHEPAGES@techepages
    Patch

    NVIDIA has disclosed a critical vulnerability, CVE-2026-65094 (CVSS 9.0), affecting BlueField Data Processing Units and the ConnectX networking ecosystem. The flaw resides in the VIRTIO-Net implementation and stems from improper validation of network messages, resulting in a write-what-where condition (CWE-123). Affected versions include VIRTIO-Net GA prior to 25.10.6, LTS25 prior to 25.10.2, LTS24 up to and including 24.10.50, and LTS23 version 1.7.21 and earlier. NVIDIA has released patched versions and recommends immediate remediation via its DOCA distribution portal.

    Post summary

    NVIDIA has disclosed a high‑severity vulnerability in its VIRTIO‑Net driver, provided patched versions, and urged immediate remediation.

    0001049
    36 followersView on X
  • Jerry Gamblin@JGamblin
    Disclosure

    Hey @nvidia CVE-2026-65094 has been on your website for a week not published to the CVE program. Can you please publish this record? https://nvidia.custhelp.com/app/answers/detail/a_id/5815 https://www.cve.org/CVERecord?id=CVE-2026-65094

    Post summary

    The user is urging Nvidia to publish CVE-2026-65094, which has not yet been released to the CVE program.

    00000488
    14.0K followersView on X
  • CyberWatch@CyberWatch05
    Patch

    JUST IN: NVIDIA discloses critical vulnerability (CVE-2026-65094, CVSS 9.0) in BlueField DPUs and ConnectX platforms. A low-privileged VM user can exploit a write-what-where flaw in VIRTIO-Net to execute arbitrary code in multi-tenant or cloud environments. Patches are available — update immediately.

    Post summary

    NVIDIA disclosed CVE-2026-65094, a critical write-what-where flaw in VIRTIO-Net on BlueField DPUs and ConnectX platforms, and urged users to apply available patches immediately.

    00000162
    538 followersView on X
  • Israel@f1tym1
    Disclosure

    NVIDIA BlueField flaw CVE-2026-65094 lets VM users execute code via crafted messages, impacting VIRTIO-Net on BlueField 3 platforms with CVSS 9․0. https://ift.tt/DiA4o9n

    Post summary

    NVIDIA announced CVE‑2026‑65094, a critical code‑execution flaw in VIRTIO‑Net on BlueField 3 that allows VM users to send crafted messages, rated CVSS 9.0.

    0000059
    1.0K followersView on X
  • キタきつね@foxbook
    Disclosure

    NVIDIA BlueFieldの脆弱性CVE-2026-65094によりコード実行が可能(CVSS 9.0) NVIDIA BlueField Flaw CVE-2026-65094 Allows Code Execution (CVSS 9.0) #DailyCyberSecurity (Jul 29) https://securityonline.info/nvidia-bluefield-cve-2026-65094/

    Post summary

    A newly disclosed NVIDIA BlueField vulnerability (CVE-2026-65094) permits code execution with a high CVSS score, yet no exploit evidence, PoC, patch, or active exploitation details are provided.

    00000247
    4.9K followersView on X
  • The Daily Tech Feed@dailytechonx
    Patch

    NVIDIA has disclosed CVE-2026-65094, a critical vulnerability in BlueField DPUs' VIRTIO-Net component, allowing remote code execution. Organizations using these DPUs in cloud or enterprise environments should apply the latest patches immediately to mitigate potential exploitation risks. #NVIDIA #BlueField #DPU #CyberSecurity #Vulnerability #CloudSecurity #DataCenter https://thedailytechfeed.com/critical-vulnerability-in-nvidia-bluefield-dpus-allows-remote-code-execution/

    Post summary

    NVIDIA discloses a critical remote code execution vulnerability in its BlueField DPUs and urges immediate patching to mitigate exploitation risk.

    0000053
    576 followersView on X
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    NVIDIA BlueField has a critical VIRTIO-Net flaw, CVE-2026-65094, rated CVSS 9.0. A VM user could trigger code execution. Update to the fixed DOCA build. #NVIDIA #BlueField #VIRTIONet #CVE202665094 #CodeExecution #CyberSecurity http://securityonline.info/nvidia-bluefield-cve-2026-65094/

    Post summary

    The post announces a critical VIRTIO‑Net flaw (CVE‑2026‑65094) with high severity (CVSS 9.0) that allows code execution, and urges users to install the patched DOCA build.

    00000377
    12.6K followersView on X

Explore more