The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to insufficient validation of incoming data, allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code within the controller’s context.

Ingress-nginx controller has weak input validation, enabling unauthorized access, code execution.

Reporter	Title	Published	Views	Family All 44
GithubExploit	Exploit for CVE-2026-3288	8 Apr 202611:26	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerabilities (CVE-2026-24513, CVE-2026-1580, CVE-2026-24514, CVE-2026-24512)	11 Feb 202609:57	–	ibm
ATTACKERKB	CVE-2026-24512	3 Feb 202622:17	–	attackerkb
Circl	CVE-2026-24512	2 Feb 202615:57	–	circl
CNNVD	Kubernetes ingress-nginx 安全漏洞	3 Feb 202600:00	–	cnnvd
CVE	CVE-2026-24512	3 Feb 202622:17	–	cve
Cvelist	CVE-2026-24512 ingress-nginx auth-method nginx configuration injection	3 Feb 202622:17	–	cvelist
EUVD	EUVD-2026-6096	16 Feb 202612:30	–	euvd
F5 Networks	K000160575: ingress-nginx vulnerability CVE-2026-24512	1 Apr 202614:17	–	f5
Github Security Blog	ingress-nginx's `rules.http.paths.path` Ingress field can be used to inject configuration into nginx	4 Feb 202600:30	–	github