Kubernetes ingress-nginx

• CVE-2026-116472 Low 2.7 ingress-nginx mirror-target self-DOS 0.4%
• CVE-2026-4342 High 8.8 ingress-nginx comment-based nginx configuration injection 1.5%
• CVE-2026-3288 High 8.8 ingress-nginx rewrite-target nginx configuration injection 7.0%
• CVE-2025-15566 High 8.8 ingress-nginx auth-proxy-set-headers nginx configuration injection 0.5%
• CVE-2026-24514 Medium 6.5 ingress-nginx Admission Controller denial of service 0.5%
• CVE-2026-24513 Low 3.1 ingress-nginx auth-url protection bypass 0.3%
• CVE-2026-24512 High 8.8 ingress-nginx auth-method nginx configuration injection 0.5%
• CVE-2026-1580 High 8.8 ingress-nginx auth-method nginx configuration injection 0.5%
• CVE-2025-24514 High 8.8 ingress-nginx controller - configuration injection via unsanitized auth-url annotation 37.3%
• CVE-2025-24513 Medium 4.8 ingress-nginx controller - auth secret file path traversal vulnerability 3.3%
• CVE-2025-1098 High 8.8 ingress-nginx controller - configuration injection via unsanitized mirror annotations 86.1%
• CVE-2025-1097 High 8.8 ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation 37.0%
• CVE-2025-1974 Critical 9.8 ingress-nginx admission controller RCE escalation 99.4%
• CVE-2024-7646 High 8.8 A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inj 27.0%
• CVE-2023-5044 High 7.6 Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation 59.6%
• CVE-2023-5043 High 7.6 Ingress nginx annotation injection causes arbitrary command execution 2.5%
• CVE-2022-4886 High 8.8 Ingress-nginx `path` sanitization can be bypassed with `log_format` directive 1.7%
• CVE-2020-8553 Medium 5.9 Kubernetes ingress-nginx Compromise of auth via subset/superset namespace names 0.9%