ingress-nginx
- Software type
- Load balancer
- Total vulnerabilities (90 days)
- 0
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/22/2026, ingress-nginx recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of ingress-nginx and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-4342ingress-nginx comment-based nginx configuration injectionCVE-2026-3288ingress-nginx rewrite-target nginx configuration injectionCVE-2025-15566ingress-nginx auth-proxy-set-headers nginx configuration injectionCVE-2026-24514ingress-nginx Admission Controller denial of serviceCVE-2026-24513ingress-nginx auth-url protection bypass| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-4342ingress-nginx comment-based nginx configuration injection | Exploitation statusNot exploited | FixYes |
| SeverityHigh |
CVE-2026-3288ingress-nginx rewrite-target nginx configuration injection | Exploitation statusActively exploited | FixYes | Published03/09/2026 | SeverityHigh |
|---|
CVE-2025-15566ingress-nginx auth-proxy-set-headers nginx configuration injection | Exploitation statusNot exploited | FixYes | Published02/06/2026 | SeverityHigh |
|---|
CVE-2026-24514ingress-nginx Admission Controller denial of service | Exploitation statusNot exploited | FixYes | Published02/03/2026 | SeverityMedium |
|---|
CVE-2026-24513ingress-nginx auth-url protection bypass | Exploitation statusNot exploited | FixYes | Published02/03/2026 | SeverityLow |
|---|
CVE-2026-24512ingress-nginx auth-method nginx configuration injection | Exploitation statusNot exploited | FixYes | Published02/03/2026 | SeverityHigh |
|---|
CVE-2026-1580ingress-nginx auth-method nginx configuration injection | Exploitation statusNot exploited | FixYes | Published02/03/2026 | SeverityHigh |
|---|
CVE-2025-24514ingress-nginx controller - configuration injection via unsanitized auth-url annotation | Exploitation statusActively exploited | FixYes | Published03/24/2025 | SeverityHigh |
|---|
CVE-2025-24513ingress-nginx controller - auth secret file path traversal vulnerability | Exploitation statusNot exploited | FixYes | Published03/24/2025 | SeverityMedium |
|---|
CVE-2025-1098ingress-nginx controller - configuration injection via unsanitized mirror annotations | Exploitation statusNot exploited | FixYes | Published03/24/2025 | SeverityHigh |
|---|
21 Results | Page 1 of 3