8.3
CVE-2026-65129
- EPSS 0.13%
- Veröffentlicht 22.09.2026 14:10:28
- Zuletzt bearbeitet 29.09.2026 18:50:20
- Erkennungen
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Infra Controller Version < 2.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.13% | 0.032 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.3 | 2.8 | 5.5 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
|
| Nvidia | 6.7 | 1.2 | 5.5 |
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
|
CWE-295 Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
https://github.com/NVIDIA/product-security/tree/main/2026/5879
https://nvd.nist.gov/vuln/detail/CVE-2026-65129
https://www.cve.org/CVERecord?id=CVE-2026-65129