5.2
CVE-2026-65085
- EPSS 0.12%
- Veröffentlicht 25.08.2026 20:15:29
- Zuletzt bearbeitet 03.09.2026 16:56:43
- Erkennungen
NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper encoding or escaping of output. A successful exploit of this vulnerability might lead to information disclosure and data tampering.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.12% | 0.018 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Nvidia | 5.2 | 2 | 2.7 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
|
CWE-116 Improper Encoding or Escaping of Output
The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.
https://github.com/NVIDIA/product-security/tree/main/2026/5872
https://nvd.nist.gov/vuln/detail/CVE-2026-65085
https://www.cve.org/CVERecord?id=CVE-2026-65085