InfoSecBulletin Cybersecurity for mankind
NVIDIA has revealed a big flaw with its BlueField DPUs and ConnectX networking systems. This issue could let attackers run code on these systems if they take advantage of it. This security flaw, known as CVE-2026-65094, affects the VIRTIO-Net part and has a CVSS v3.1 score of 9.0, showing it is a big risk for businesses and cloud setups.
NVIDIA‘s July 2026 security notice says the BlueField-3 Virtio-Net has a CWE-123 write-what-where problem. This lets a bad actor change memory by writing random data to wrong places.
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
MITRE ATT&CK v20 Unveils 9 New Attack Techniques On AI Exploits, MFA Bypass, and CAPTCHA Evasion
Hackers Exploit Fortinet Flaws to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
Hacker stole Meta GitHub repos; Stole Source Code
Urgent patch! Zoom,NVIDIA and IBM Patch 41 Security flaws
Microsoft patches record braking 1411 flaws; 2 zero days
Anthropic unveils “OSS Scanner” Free AI Vulnerability Scanner for Open-Source Projects
Rise on RCE Exploits Targeting Hikvision Camera Flaw
This type of weakness is very risky because it can let an attacker run their own code, which could harm the security and privacy of the systems involved.
NVIDIA BlueField Vulnerability
The attack plan shows a virtual machine (VM) user with few rights sending a harmful message to take advantage of a weakness. Because the attack method is nearby and does not need user action, it can happen in shared spaces, like cloud systems or virtual data centers.
The vulnerability also includes a scope change. This means that exploiting it could impact other resources besides the first compromised part, making it more serious in real-world settings.
Security experts say BlueField DPUs are often used to take networking, storage, and security jobs off host CPUs. This makes them important parts of today’s data center setups.
A good compromise here could help attackers get around regular security measures, spread across different tasks, or mess up network traffic.
This increases the danger for companies that depend a lot on NVIDIA networking tools for fast computing and cloud-based settings. The weakness impacts several versions of NVIDIA VIRTIO-Net, including both regular and long-term support versions.
All versions before 25.10.6 for VIRTIO-Net GA, 25.10.2 for LTS25, 24.10.50 for LTS24, and 23.10.23 for LTS23 have issues. NVIDIA has put out updates to fix the problem and strongly advises companies to update right away to avoid potential risks.
NVIDIA said that its risk assessment is an average from different uses and might not show the risk levels in specific places.
Organizations should check their infrastructure, especially if untrusted virtual machines or users can access shared network resources. NVIDIA found this vulnerability within its own systems, and as of the disclosure date, there are no reports of it being actively exploited.
Security teams need to focus on fixing write-what-where vulnerabilities because they are serious and have been used in real attacks.
Users can get the latest news from NVIDIA’s product security site and DOCA VIRTIO-Net distribution channels. To lower the risk of problems, it is a good idea to install patches, limit access to untrusted VMs, and watch for strange network activity as part of a defense plan.
