{"vulnerability": "CVE-2026-65173", "sightings": [{"uuid": "2a3c44d0-efbe-472b-8292-84a1ef2d10e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65173", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxr5bzpvqp22", "content": "CVE-2026-65173 - aistore framework\nThe AIStore software on Linux does not check who is sending requests to its token-revocation feature. An attacker on the network could send false revocation lists,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aistoreframework #nvidia #CVE #infosec", "creation_timestamp": "2026-10-13T13:30:05.753550Z"}, {"uuid": "8163f910-0a82-4ae8-892b-df08b90931a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65173", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117433842102152396", "content": "NVIDIA AIStore (Linux) hit by CRITICAL vuln (CVE-2026-65173): missing auth on token-revocation endpoint lets attackers submit forged revocation lists, risking data tampering & DoS. Patch pending. https://radar.offseq.com/threat/cve-2026-65173-cwe-306-missing-authentication-for-critical-function-in-nvidia-aistore-framework-4286dd8ee28d3ef2 #OffSeq #NVIDIA #Infosec", "creation_timestamp": "2026-10-13T13:30:28.073029Z"}, {"uuid": "2c7bfdc6-e9ed-4a9a-ba16-b37ce766a6fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65173", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxr5confta2y", "content": "NVIDIA AIStore CRITICAL flaw (CVE-2026-65173): unauthenticated attackers can tamper with token-revocation lists, risking data integrity & DoS. Patch guidance pending. https://radar.offseq.com/threat/cve-2026-65173-cwe-306-missing-authentication-for-critical-function-in-nvidia-aistore-framework-42...", "creation_timestamp": "2026-10-13T13:30:28.170614Z"}, {"uuid": "1f36dfcf-3f91-4c52-a37a-241e51ea2c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65173", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117433946720124866", "content": "CVE-2026-65173  NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.\nhttps://www.cve.org/CVERecord?id=CVE-2026-65173https://nvd.nist.gov/vuln/detail/CVE-2026-65173https://www.cve.org/CVERecord?id=CVE-2026-65173https://github.com/NVIDIA/product-security/tree/main/2026/5889#NVIDIA #AIStoreframework#CVE_2026_65173#bot", "creation_timestamp": "2026-10-13T13:57:02.258537Z"}, {"uuid": "18a731dc-f543-4f48-9862-a4007e04f632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65173", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxr7f7hnic2z", "content": "\ud83d\udea8 CVE-2026-65173 \u2014 CVSS 9.1 CRITICAL\n\nNVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint w...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-65173\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-13T14:07:39.763972Z"}]}