Skip to main content

NVIDIA Infrastructure Controller EUVDEUVD-2026-84419

| CVE-2026-65115 MEDIUM
Uncontrolled Resource Consumption (CWE-400)
2026-09-22 nvidia GHSA-vhmc-w8jp-j6gj
Denial Of Service Linux Nvidia Infrastructure Controller
6.5
CVSS 3.1 · Vendor: nvidia
Share

Severity by source

Vendor (nvidia) PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
6.5 MEDIUM

Network-reachable low-complexity DoS gated behind a low-privileged account (PR:L), no user interaction, unchanged scope, availability-only impact per CWE-400.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (nvidia).

CVSS VectorVendor: nvidia

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
Metadata Corrected
Sep 22, 2026 - 15:40 vuln.today
tag: Linux added
Analysis Generated
Sep 22, 2026 - 15:25 vuln.today
CVE Published
Sep 22, 2026 - 14:10 cve.org
MEDIUM 6.5

DescriptionCVE.org

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service.

AnalysisAI

Denial of service in NVIDIA Infrastructure Controller for Linux (versions 0 through 1.9) lets an authenticated, low-privileged user with network reach to the management interface exhaust resources and degrade or halt the controller. The flaw is a CWE-400 uncontrolled resource consumption issue rated vendor CVSS 3.1 base 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), meaning availability-only impact, no confidentiality or integrity loss, low attack complexity, and no user interaction, with the credential requirement being the principal barrier to exploitation. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Requires an authenticated low-privileged account (PR:L) with network reach (AV:N) to the NVIDIA Infrastructure Controller management interface; no user interaction is needed and attack complexity is low. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The vendor CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, base 6.5) describes a network-reachable, low-complexity, availability-only denial of service that requires an authenticated low-privileged account. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation No vendor-released patch version is specified in the available advisory data for CVE-2026-65115, so the primary action is to consult the NVIDIA product security bulletin at https://github.com/NVIDIA/product-security/tree/main/2026/5879 (also linked from https://nvd.nist.gov/vuln/detail/CVE-2026-65115) and apply the update NVIDIA publishes for the Infrastructure Controller 0-1.9 branch as soon as it is available; until then, treat the controller as vulnerable. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Infrastructure Controller

View all
CVE-2026-65130 CRITICAL
9.8 Sep 22

Unauthenticated OS command injection in NVIDIA Infrastructure Controller for Linux (versions 0 through 1.9) lets a netwo
CVE-2026-65113 CRITICAL
9.8 Sep 22

Hard-coded credentials in NVIDIA Infrastructure Controller for Linux (versions 0 through 1.9) let an unauthenticated rem
CVE-2026-65114 CRITICAL
9.8 Sep 22

Missing authentication for a critical function in NVIDIA Infrastructure Controller for Linux (versions 0 through 1.9) al
CVE-2026-65121 CRITICAL
9.8 Sep 22

Improper authentication in NVIDIA Infrastructure Controller for Linux (versions 0 through 1.9, tracked as EUVD-2026-8440
CVE-2026-65118 CRITICAL
9.8 Sep 22

Improper TLS certificate validation in NVIDIA Infrastructure Controller for Linux (versions 0 through 1.9) allows an att
CVE-2026-65125 HIGH
8.8 Sep 22

NVIDIA Infrastructure Controller for Linux (versions 0 through 1.9) can be induced to operate on a file name or path tha
CVE-2026-65128 HIGH
8.8 Sep 22

SQL injection in NVIDIA Infrastructure Controller for Linux (versions 0 through 1.9) allows a remote attacker who holds

CVE-2026-65126 HIGH
8.8 Sep 22

Improper enforcement of the behavioral workflow in NVIDIA Infrastructure Controller for Linux (versions 0 through 1.9) l
CVE-2026-65117 HIGH
8.8 Sep 22

Hard-coded credentials in NVIDIA Infrastructure Controller for Linux (versions 0 through 1.9) let an unauthenticated att
CVE-2026-65129 HIGH
8.3 Sep 22

Improper TLS certificate validation in NVIDIA Infrastructure Controller for Linux (versions 0 through 1.9) allows an att
CVE-2026-65124 HIGH
8.1 Sep 22

XML injection in NVIDIA Infrastructure Controller for Linux (affected versions 0 through 1.9) allows an attacker who alr
CVE-2026-65112 MEDIUM
6.5 Sep 22

Denial of service in NVIDIA Infrastructure Controller for Linux affects versions 0 through 1.9, where an attacker who al

Same weakness CWE-400 – Uncontrolled Resource Consumption

View all
CVE-2023-44487 HIGH POC
7.5
CVE-2021-21341 HIGH POC
7.5
CVE-2022-29885 HIGH POC
7.5
CVE-2026-45498 HIGH POC
7.5
CVE-2016-8610 HIGH
7.5
CVE-2026-28318 HIGH POC
7.5
CVE-2023-38180 HIGH
7.5
CVE-2025-26673 HIGH
7.5

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

EUVD-2026-84419 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy