Skip to contentKubernetes Ingress-nginx vulnerabilities
- kubernetes ingress-nginx, suse rancher prime rke2 ingress-nginx +1 moreingress-nginx mirror-target self-DOSCVE-2026-1164722.7 Low
- kubernetes ingress-nginx, nginx ingress controller +1 moreingress-nginx comment-based nginx configuration injectionCVE-2026-4342Public exploitFix available8.8 High
- kubernetes ingress-nginxingress-nginx rewrite-target nginx configuration injectionCVE-2026-3288Public exploit8.8 High
- kubernetes ingress-nginxingress-nginx auth-proxy-set-headers nginx configuration injectionCVE-2025-155668.8 High
- kubernetes ingress-nginxingress-nginx Admission Controller denial of serviceCVE-2026-24514Public exploitFix available6.5 Medium
- kubernetes ingress-nginxingress-nginx auth-url protection bypassCVE-2026-24513Fix available3.1 Low
- kubernetes ingress-nginxingress-nginx auth-method nginx configuration injectionCVE-2026-24512Fix available8.8 High
- kubernetes ingress-nginxingress-nginx auth-method nginx configuration injectionCVE-2026-1580Fix available8.8 High
- kubernetes ingress-nginxingress-nginx controller - configuration injection via unsanitized auth-url annotationCVE-2025-24514Public exploitFix availableEPSS 37.3%8.8 High
- kubernetes ingress-nginxingress-nginx controller - auth secret file path traversal vulnerabilityCVE-2025-24513Fix available4.8 Medium
- kubernetes ingress-nginxingress-nginx controller - configuration injection via unsanitized mirror annotationsCVE-2025-1098Public exploitFix availableEPSS 86.1%8.8 High
- kubernetes ingress-nginxingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotationCVE-2025-1097Public exploitFix availableEPSS 37.0%8.8 High
- kubernetes ingress-nginxingress-nginx admission controller RCE escalationCVE-2025-1974Public exploitFix availableEPSS 99.4%9.8 Critical
- kubernetes ingress-nginxA security issue was discovered in ingress-nginx where an actor with permission to create Ingress...CVE-2024-7646Public exploitEPSS 27.0%8.8 High
- kubernetes ingress-nginxCode injection via nginx.ingress.kubernetes.io/permanent-redirect annotationCVE-2023-5044Public exploitFix availableEPSS 53.7%7.6 High
- kubernetes ingress-nginxIngress nginx annotation injection causes arbitrary command executionCVE-2023-5043Public exploitFix available7.6 High
- kubernetes ingress-nginxIngress-nginx `path` sanitization can be bypassed with `log_format` directiveCVE-2022-4886Fix available8.8 High
- kubernetes ingress-nginxIngress-nginx `path` sanitization can be bypassed with newline characterCVE-2021-25748Fix available7.6 High
- kubernetes ingress-nginxIngress-nginx directive injection via annotationsCVE-2021-257467.6 High
- kubernetes ingress-nginxIngress-nginx path can be pointed to service account token fileCVE-2021-25745Fix available7.6 High
- kubernetes ingress-nginx, netapp trident +1 moreIngress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespacesCVE-2021-25742Fix available7.6 High
- kubernetes ingress-nginxKubernetes ingress-nginx Compromise of auth via subset/superset namespace namesCVE-2020-8553Fix available5.9 Medium