CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

428 matches found

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...

8.8CVSS7.2AI score0.34677EPSS

Exploits7References3

Nuclei•added 2 days ago•29 views

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

8.8CVSS7.2AI score0.31809EPSS

Exploits8References3

Nuclei•added 3 days ago•46 views

Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx...

8.8CVSS6.9AI score0.83066EPSS

Exploits7References3

OSV•added 6 days ago•1 views

CLEANSTART-2026-HJ99696 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507 applied in versions: 1.14.5-r1

Multiple security vulnerabilities affect the ingress-nginx-controller-1.14 package. These issues are resolved in later releases. See references for individual vulnerability details...

9.6CVSS6.1AI score0.00939EPSS

Exploits0References21

Chainguard•added 2026/07/09 8:31 p.m.•8 views

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: containerd, harbor-fips, harbor, rekor-fips, keda-fips, reports-server, traefik-fips, knative-serving-fips, cerbos-fips, kubernetes, snyk-cli, kube-state-metrics, podman, k8s-device-plugin, kyverno, vault-fips, zarf, tekton-pipelines-fips, consul-fips,...

5.3AI score

Exploits0