CVE-2026-65130 NVIDIA CVE debrief

Who should care

Defenders responsible for systems using NVIDIA Infrastructure Controller for Linux should verify exposure and assess potential impact. This includes roles managing Linux systems, vulnerability management teams, and incident response teams.

Why it matters

CVE-2026-65130 is a high-severity vulnerability in NVIDIA Infrastructure Controller for Linux that could allow OS command injection. Defenders should verify exposure, assess potential impact, and prioritize patching or compensating controls. Evidence is limited, and specific affected versions and exploitation details require verification from official sources.

• Potential code execution requires verification from official sources
• Possible data tampering needs further investigation
• Denial of service is a supported consequence based on CVE description
• Information disclosure impact requires additional details for confirmation

Technical summary

CVE-2026-65130 is a vulnerability in NVIDIA Infrastructure Controller for Linux that could allow an attacker to cause OS command injection. The vulnerability has a CVSS score of 8 and is considered HIGH severity. The CVE record and NVD entry provide details on the vulnerability, but specific affected versions and exploitation details are limited. Defenders should prioritize verifying exposure and assessing potential impact, focusing on systems using affected NVIDIA Infrastructure Controller for Linux versions. The vulnerability could lead to code execution, data tampering, denial of service, and information disclosure.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, focusing on systems using affected NVIDIA Infrastructure Controller for Linux versions.

Recommended defensive actions

• Verify system exposure by checking if using affected NVIDIA Infrastructure Controller for Linux versions
• Assess potential impact on code execution, data tampering, denial of service, and information disclosure
• Review and apply patches from NVIDIA as available
• Monitor system logs for suspicious activity
• Consider compensating controls for unpatched systems

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but specific affected versions and exploitation details are limited. Defenders should verify system exposure by checking if using affected NVIDIA Infrastructure Controller for Linux versions, assess potential impact on code execution, data tampering, denial of service, and information disclosure, and review and apply patches from NVIDIA as available. The evidence is limited, and defenders need to verify the affected scope, severity, and vendor guidance.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.