CVE-2026-65113Disclosure(linux / infra_controller)

LOWCVSS 9.8 · CRITICAL

Signal is active with 4 mentions in latest observed window

Immediate actions

Patch linux infra_controller systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure.

linux CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/NVIDIA/product-security/tree/main/2026/5879

Vendor / third-party advisories

https://www.cve.org/CVERecord?id=CVE-2026-65113

Other references

https://nvd.nist.gov/vuln/detail/CVE-2026-65113

Weakness type (CWE)

CWE-798

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

infra_controller
linux_kernel

Threat summary

Patch or workaround signal is available
6 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 4 signals
Disclosure: 3 classified signals
Peaked at 4 mentions on most recent observed day (2026-09-24)
6 total mentions across 2 days

Affected systems

Vendors

linux nvidia

Products

infra_controllerlinux_kernel

1 version affected across 2 products

Deep dive

Activity timeline6 mentions / 2d

Signal classification2 categories

Disclosure

350.0%

Patch

350.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-22	2	Disclosure1Patch1
2026-09-24	4	Disclosure2Patch2

Full discourse6 posts

Daily CyberSecurity@Daily_CyberSec46d
Patch
NVIDIA patched critical NVIDIA Infrastructure Controller vulnerabilities across Linux builds. Learn how CVE-2026-65113 impacts systems and update now. #NVIDIA #Cybersecurity #CVE202665113 #LinuxSecurity #Infosec #DataCenter https://securityonline.info/nvidia-infrastructure-controller-vulnerabilities/
Post summary
The text announces NVIDIA's patch release for CVE-2026-65113 in their Infrastructure Controller for Linux systems, emphasizing the need to update. No exploit details or technical specifics are included.
01020485
13.0K followersView on X
♫Why♥Not♪@Python_s_44d
Patch
🚨 #ALERT — NVIDIA INFRASTRUCTURE CONTROLLER CRITICAL AUTHENTICATION FLAW September 22, 2026 CONFIRMED BY: NVIDIA PRODUCT: NVIDIA Infrastructure Controller for Linux CVE: CVE-2026-65113 SEVERITY: Critical — CVSS 9.8 IMPACT: A hard-coded credential vulnerability may allow privilege escalation, data tampering, denial of service and information disclosure. NVIDIA’s CVSS vector is AV:N/AC:L/PR:N/UI:N. AFFECTED VERSIONS: NVIDIA Infrastructure Controller 0 through 1.9. FIX: Upgrade to NVIDIA Infrastructure Controller 2.0 or later. EXPLOITATION STATUS: No confirmed in-the-wild exploitation found. CVE-2026-65113 is not present in the current CISA KEV snapshot. URGENT ACTION: Upgrade to version 2.0+, restrict controller/API access to trusted management networks, and review exposed deployments for anomalous authentication or administrative activity. SOURCE: https://nvidia.custhelp.com/app/answers/detail/a_id/5879/~/security-bulletin%3A-nvidia-infrastructure-controller---september-2026 #CyberSecurity #InfoSec #ThreatIntel #NVIDIA #CVE #PrivilegeEscalation #AIInfrastructure #CloudSecurity #Vulnerability #SecOps
Post summary
The post announces a critical hard-coded credential vulnerability in NVIDIA Infrastructure Controller with affected versions and CVSS details, but its primary actionable takeaway is to upgrade to version 2.0 or later. It explicitly reports no active exploitation and no PoC or exploit tool is mentioned.
0000180
224 followersView on X
Upwind Security MDR@UpwindMDR46d
Disclosure
🚨Critical - NVIDIA Infrastructure Controller Hard-coded Credentials Privilege Escalation (CVE-2026-65113) NVIDIA Infrastructure Controller for Linux ships with hard-coded credentials that can be used to authenticate to the controller/management interface. An attacker who can reach the service can log in with embedded creds and escalate privileges to tamper with data, disrupt operations (DoS), or access sensitive information. 👉Affected: NVIDIA Infrastructure Controller for Linux
Post summary
The tweet discloses a critical hard‑coded credential vulnerability (CVE‑2026‑65113) in NVIDIA Infrastructure Controller for Linux that enables privilege escalation, data tampering, DoS, and unauthorized data access. No mention of PoC, exploit code, active exploitation, or patch details is provided.
00100130
310 followersView on X
Juan F Gallego@jfernandogg44d
Disclosure
NVIDIA avisó: el software que controla clusters de GPUs (NICo) venía con usuario/clave fijos de fábrica. Fallo crítico 9.8 (CVE-2026-65113). Traducción: quien llegue a esa red de administración puede mandar en el “cerebro” del data center de IA. Si tu cloud o proveedor vende GPU: pregunta si ya están en la versión 2.0 y si cambiaron esos defaults. No asumas que “NVIDIA = seguro de caja”.
Post summary
The text discloses a critical NVIDIA vulnerability (CVE-2026-65113) with fixed factory credentials, highlighting risks to AI data centers but lacking PoC, exploits, or mitigation specifics.
0000054
342 followersView on X
Juan F Gallego@jfernandogg44d
Patch
CVE-2026-65113 (9.8): NICo (NVIDIA Infrastructure Controller), control plane de clusters AI bare-metal, con credenciales hard-coded. Lote de 14 CVEs en el bulletin 5879; upgrade a 2.0. Segmenta la red de management, audita defaults de fábrica y parchea. GPU-as-a-Service con control plane débil = P0, no “ticket de backlog”.
Post summary
The post identifies CVE-2026-65113 as a credential-based risk in NVIDIA's NICo control plane and mandates upgrading to version 2.0, emphasizing network segmentation and audit practices. Technical details frame it as a high-severity issue (CVSS 9.8).
0000047
342 followersView on X
Cybersecurity News DE@cybsecuritynews44d
Disclosure
#schwachstellen CVE-2026-65113: Kritische Schwachstelle in NVIDIA Infrastructure Controller for Linux #cve202665113 #infrastructurecontrollerforlinux #nvidia https://cybersecurity-news.de/cve-2026-65113-nvidia-infrastructure-controller-linux
Post summary
German-language tweet announces CVE-2026-65113 as a critical vulnerability in NVIDIA Infrastructure Controller for Linux, linking to a news page, but provides no PoC, exploit, patch, or technical details in the text itself.
0000033
15 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	linux	linux_kernel	-	-	-
App	nvidia	infra_controller	-	-	-

Explore more

Back to dashboard linux CVEs nvidia CVEs infra_controller vulnerabilities

What researchers are saying

CVE-2026-65113

♫Why♥Not♪[verified]@Python_s_Patch

The post announces a critical hard-coded credential vulnerability in NVIDIA Infrastructure Controller with affected versions and CVSS details, but its primary actionable takeaway is to upgrade to version 2.0 or later. It explicitly reports no active exploitation and no PoC or exploit tool is mentioned.

Upwind Security MDR[verified]@UpwindMDRDisclosure

The tweet discloses a critical hard‑coded credential vulnerability (CVE‑2026‑65113) in NVIDIA Infrastructure Controller for Linux that enables privilege escalation, data tampering, DoS, and unauthorized data access. No mention of PoC, exploit code, active exploitation, or patch details is provided.

Juan F Gallego[verified]@jfernandoggDisclosure

The text discloses a critical NVIDIA vulnerability (CVE-2026-65113) with fixed factory credentials, highlighting risks to AI data centers but lacking PoC, exploits, or mitigation specifics.

Juan F Gallego[verified]@jfernandoggPatch

The post identifies CVE-2026-65113 as a credential-based risk in NVIDIA's NICo control plane and mandates upgrading to version 2.0, emphasizing network segmentation and audit practices. Technical details frame it as a high-severity issue (CVSS 9.8).

Daily CyberSecurity@Daily_CyberSecPatch

The text announces NVIDIA's patch release for CVE-2026-65113 in their Infrastructure Controller for Linux systems, emphasizing the need to update. No exploit details or technical specifics are included.

Cybersecurity News DE@cybsecuritynewsDisclosure

German-language tweet announces CVE-2026-65113 as a critical vulnerability in NVIDIA Infrastructure Controller for Linux, linking to a news page, but provides no PoC, exploit, patch, or technical details in the text itself.