CVE-2026-65118(linux / infra_controller)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.

linux CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://github.com/NVIDIA/product-security/tree/main/2026/5879

Vendor / third-party advisories

https://www.cve.org/CVERecord?id=CVE-2026-65118

Other references

https://nvd.nist.gov/vuln/detail/CVE-2026-65118

Weakness type (CWE)

CWE-295

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

infra_controller
linux_kernel

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Affected systems

Vendors

linux nvidia

Products

infra_controllerlinux_kernel

1 version affected across 2 products

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

DFIR Lab@DFIR_Lab2d
🚨 HIGH Severity: CVE-2026-65118 (CVSS 7.5) NVIDIA Infrastructure Controller for Linux - improper certificate validation flaw. Risk: info disclosure, data tampering, DoS. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/02xZzAVGgP
0000023
142 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	linux	linux_kernel	-	-	-
App	nvidia	infra_controller	-	-	-

Explore more

Back to dashboard linux CVEs nvidia CVEs infra_controller vulnerabilities