AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NvidiaCVE-2026-65124

Nvidia Infrastructure Controller: tampering

Nvidia

CVE-2026-65124 · Published Sep 22, 2026 · updated Sep 29, 2026

Medium5.9
No fix yet
Nvidia advisory

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection. A successful exploit of this vulnerability might lead to data tampering and denial of service.

Affected versions

PackageAffectedFixed in
Infrastructure Controller
Product
<= 0 to 1.9No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-91

More Nvidia advisories

All Nvidia
Medium 4.1Sep 22Nvidia Infrastructure Controller: information disclosureCVE-2026-65127no fix yetHigh 8.8Sep 22Nvidia Infrastructure Controller: SQL injectionCVE-2026-65128no fix yetMedium 6.7Sep 22Nvidia Infrastructure Controller: improper certificate validationCVE-2026-65129no fix yetHigh 8.0Sep 22Nvidia Infrastructure Controller: command injectionCVE-2026-65130no fix yetHigh 7.8Sep 22Nvidia NeMo Speech: code executionCVE-2026-65178no fix yetHigh 8.8Sep 22Nvidia NeMo Speech: code executionCVE-2026-65179no fix yet