The NVIDIA Infrastructure Controller for Linux contains a vulnerability identified as CVE-2026-65113, categorized under CWE-798 (Use of Hard-coded Credentials). This vulnerability allows an attacker to leverage embedded credentials within the software, potentially leading to unauthorized privilege escalation, data tampering, denial of service, and information disclosure. The CVSS v3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation of this vulnerability could result in an attacker gaining elevated privileges on the affected system, modifying or tampering with data, causing service disruptions (denial of service), and accessing sensitive information. The critical CVSS score of 9.8 underscores the severity and potential impact on confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor for vendor updates and apply any recommended security controls specific to the NVIDIA Infrastructure Controller. Avoid exposure of the affected system to untrusted networks if possible.