Kubernetes ingress-nginx
17 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-4342 | < 1.13.9 ; < 1.14.5 ; < 1.15.1 | ingress-nginx comment-based nginx configuration injection | HIGH 8.8 | 1.4 % | ||
| CVE-2026-3288 | < 1.13.8 ; < 1.14.4 ; < 1.15.0 | ingress-nginx rewrite-target nginx configuration injection | HIGH 8.8 | 6.5 % | ||
| CVE-2025-15566 | < 1.12.5 ; < 1.13.1 | ingress-nginx auth-proxy-set-headers nginx configuration injection | HIGH 8.8 | 0.5 % | ||
| CVE-2026-24514 | < 1.13.7 ; < 1.14.3 | ingress-nginx Admission Controller denial of service | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-24513 | < 1.13.7 ; < 1.14.3 | ingress-nginx auth-url protection bypass | LOW 3.1 | 0.3 % | ||
| CVE-2026-24512 | < 1.13.7 ; < 1.14.3 | ingress-nginx auth-method nginx configuration injection | HIGH 8.8 | 0.5 % | ||
| CVE-2026-1580 | < 1.13.7 ; < 1.14.3 | ingress-nginx auth-method nginx configuration injection | HIGH 8.8 | 0.5 % | ||
| CVE-2025-24514 | ≤ 1.11.4 ; 1.12.0 | ingress-nginx controller - configuration injection via unsanitized auth-url annotation | HIGH 8.8 | 37 % | ||
| CVE-2025-24513 | ≤ 1.11.4 ; 1.12.0 | ingress-nginx controller - auth secret file path traversal vulnerability | MEDIUM 4.8 | 3.3 % | ||
| CVE-2025-1098 | ≤ 1.11.4 ; 1.12.0 | ingress-nginx controller - configuration injection via unsanitized mirror annotations | HIGH 8.8 | 86 % | ||
| CVE-2025-1097 | ≤ 1.11.4 ; 1.12.0 | ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation | HIGH 8.8 | 37 % | ||
| CVE-2025-1974 | ≤ 1.11.4 ; 1.12.0 | ingress-nginx admission controller RCE escalation | CRITICAL 9.8 | 99 % | ||
| CVE-2024-7646 | 1.11.0 – < 1.11.2 ; < 1.10.4 | A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `ex | HIGH 8.8 | 27 % | ||
| CVE-2023-5044 | < 1.9.0 | Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation | HIGH 8.8 | 60 % | ||
| CVE-2023-5043 | < 1.9.0 | Ingress nginx annotation injection causes arbitrary command execution | HIGH 8.8 | 2.5 % | ||
| CVE-2022-4886 | < 1.8.0 | Ingress-nginx `path` sanitization can be bypassed with `log_format` directive | HIGH 8.8 | 1.7 % | ||
| CVE-2020-8553 | unspecified – < 0.28.0 | Kubernetes ingress-nginx Compromise of auth via subset/superset namespace names | MEDIUM 5.9 | 0.9 % |