NVIDIA BlueField Flaw Lets VM Users Execute Code via Crafted Messages

Gbhackers •Divya • July 29, 2026

NVIDIA has revealed a significant security vulnerability in its BlueField data processing units (DPUs) that could allow virtual machine (VM) users to execute arbitrary code through specially crafted network messages. This raises serious concerns for cloud and virtualized infrastructure environments. The vulnerability, designated as CVE-2026-65094, impacts NVIDIA VIRTIO-Net implementations on BlueField-3 platforms and has a […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

NVIDIA BlueField Vulnerability Allows Code Execution via Network Messages NVIDIA has disclosed a critical security vulnerability in its BlueField data processing units (DPUs) that enables virtual machine (VM) users to execute arbitrary code through specially crafted network messages. This vulnerability, identified as CVE-2026-65094, affects the VIRTIO-Net implementations on BlueField-3 platforms. The flaw poses a significant risk to cloud and virtualized infrastructure environments, particularly for enterprise deployments. The vulnerability has been assigned a CVSS v3.1 score of 9.0, indicating a high severity level. Organizations using affected systems are urged to take immediate action to mitigate potential exploitation. The exact number of affected systems is not specified, but the impact is expected to be widespread across cloud services utilizing NVIDIA's technology. 2 sources 73

Extracted Entities

NVIDIA BlueField Flaw Lets VM Users Execute Code via Crafted Messages

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)