Kubernetes Ingress Nginx Vulnerabilities
Kubernetes Ingress Nginx vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Ingress NGINX Controller Vulnerability in Kubernetes
CVE-2025-15566KubernetesIngress-nginx8.8HIGHDenial of Service Vulnerability in Ingress-NGINX by Kubernetes
CVE-2026-24514KubernetesIngress-nginx6.5MEDIUMAuthentication Bypass in Ingress-Nginx by NGINX, Inc.
CVE-2026-24513KubernetesIngress-nginx3.1LOWArbitrary Code Execution Vulnerability in Ingress Controller by NGINX
CVE-2026-24512KubernetesIngress-nginx8.8HIGHArbitrary Code Execution Vulnerability in Ingress-NGINX by Kubernetes
CVE-2026-1580KubernetesIngress-nginx8.8HIGHIngress-nginx Configuration Vulnerability in Kubernetes
CVE-2025-1097KubernetesIngress-nginx📈👾🟡EPSS 20%📰8.8HIGHArbitrary Code Execution Vulnerability in Ingress-Nginx by Kubernetes
CVE-2025-1098KubernetesIngress-nginxEPSS 53%8.8HIGHArbitrary Code Execution Vulnerability in Ingress-Nginx Controller of Kubernetes
CVE-2025-1974KubernetesIngress-nginx📈💰👾🟡EPSS 90%📰9.8CRITICALDirectory Traversal Vulnerability in Ingress-Nginx by Kubernetes
CVE-2025-24513KubernetesIngress-nginx4.8MEDIUMArbitrary Code Execution Vulnerability in nginx Ingress Controller by Kubernetes
CVE-2025-24514KubernetesIngress-nginxEPSS 30%8.8HIGHIngress nginx annotation injection causes arbitrary command execution
CVE-2023-5043KubernetesIngress-nginx👾🟡8.8HIGHPermanent Redirect Vulnerability in Nginx Ingress
CVE-2023-5044KubernetesIngress-nginx👾🟡7.6HIGHIngress-nginx `path` sanitization can be bypassed with `log_format` directive
CVE-2022-4886KubernetesIngress-nginx6.5MEDIUMIngress-nginx `path` sanitization can be bypassed with newline character
CVE-2021-25748KubernetesKubernetes Ingress-nginx7.6HIGHIngress-nginx path can be pointed to service account token file
CVE-2021-25745KubernetesKubernetes Ingress-nginx7.6HIGHIngress-nginx directive injection via annotations
CVE-2021-25746KubernetesKubernetes Ingress-nginx7.6HIGHIngress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces
CVE-2021-25742KubernetesKubernetes Ingress-nginx7.6HIGHKubernetes ingress-nginx Compromise of auth via subset/superset namespace names
CVE-2020-8553KubernetesIngress-nginx5.9MEDIUM