What is the CVSS score of CVE-2026-65112?

CVE-2026-65112 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.5%.

NVIDIA Infrastructure Controller CVE-2026-65112

EUVD-2026-84422 MEDIUM

Uncontrolled Resource Consumption (CWE-400)

2026-09-22 nvidia

GHSA-6wf9-5qf7-xxvg

Denial Of Service Linux Nvidia Infrastructure Controller

6.5

CVSS 3.1 · Vendor: nvidia

Severity by source

Vendor (nvidia) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

6.5 MEDIUM

Network-reachable controller service exploitable by a low-privileged authenticated user with no interaction, causing availability-only impact via resource exhaustion; no confidentiality or integrity effect.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (nvidia).

CVSS VectorVendor: nvidia

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Metadata Corrected

Sep 22, 2026 - 15:40 vuln.today

tag: Linux added

Analysis Generated

Sep 22, 2026 - 15:26 vuln.today

CVE Published

Sep 22, 2026 - 14:10 cve.org

MEDIUM 6.5

DescriptionCVE.org

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.

AnalysisAI

Denial of service in NVIDIA Infrastructure Controller for Linux affects versions 0 through 1.9, where an attacker who already holds valid low-privilege credentials on the controller can trigger uncontrolled resource consumption that degrades or halts the service (CWE-400). The CVSS 3.1 score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) reflects a remotely reachable flaw with low attack complexity and no user interaction, but impact is confined to availability - there is no data disclosure or modification. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Requires network access to the NVIDIA Infrastructure Controller service plus valid low-privilege authentication (CVSS PR:L) - this is not an unauthenticated flaw, so an attacker must already possess or obtain credentials on the controller. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	This is a genuine but bounded issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	NVIDIA has published vendor security guidance for this issue at https://github.com/NVIDIA/product-security/tree/main/2026/5879, but the available data does not identify an exact fixed release version, so operators should monitor that advisory for the patched build and upgrade Infrastructure Controller 0-1.9 as soon as a fixed version is named - no exact fix version should be assumed from the data provided (no vendor-released patch version identified at time of analysis). … Detailed patch versions, workarounds, and compensating controls in full report.