AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NvidiaCVE-2026-65129

Nvidia Infrastructure Controller: improper certificate validation

Nvidia

CVE-2026-65129 · Published Sep 22, 2026 · updated Sep 29, 2026

Medium6.7
No fix yet
Nvidia advisory

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.

Affected versions

PackageAffectedFixed in
Infrastructure Controller
Product
<= 0 to 1.9No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-295

More Nvidia advisories

All Nvidia
Medium 4.1Sep 22Nvidia Infrastructure Controller: information disclosureCVE-2026-65127no fix yetHigh 8.8Sep 22Nvidia Infrastructure Controller: SQL injectionCVE-2026-65128no fix yetHigh 8.0Sep 22Nvidia Infrastructure Controller: command injectionCVE-2026-65130no fix yetHigh 7.8Sep 22Nvidia NeMo Speech: code executionCVE-2026-65178no fix yetHigh 8.8Sep 22Nvidia NeMo Speech: code executionCVE-2026-65179no fix yetMedium 5.0Sep 22Nvidia Infrastructure Controller: hard-coded credentialsCVE-2026-65117no fix yet