228 matches found
CVE-2026-3288-lab
CVE-2026-3288 Vulnerable Lab Docker NGINX Ingress Controller Configuration Injection ⚠️ WARNING : This lab contains intentionally vulnerable configurations for AUTHORIZED SECURITY TRAINING ONLY Vulnerability Overview CVE-2026-3288 CVSS 8.8 HIGH - Configuration injection in NGINX Ingress Controller...
CVE-2023-5044
CVE-2023-5044 Poc for CVE 2023 5044 Prerequisites Kind: v0.20.0 Kubectl: v1.29.3 Docker: v26.0.0 PoC Give Docker the correct privileges sudo usermod -aG docker $USER && newgrp docker Start the cluster with extraPortMaping and node-labels to prepare it for an ingress. cat EOF | kind create cluster...
CVE-2024-7646
CVE-2024-7646 PoC CVE-2024-7646 apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: example-ingress annotations: nginx.ingress.kubernetes.io/server-snippet: | addheader X-Pwn-Header "Pwn\r\n HTTP/1.1 200 OK Content-Type: text/html alert'XSS'; --------"; return 200 "PWNed"; spec: rules:...
CVE-2023-5044
CVE-2023-5044 Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation Firstly, you need deploy Pod & Service: kind: Pod apiVersion: v1 metadata: name: apple-app labels: app: apple spec: containers: - name: apple-app image: hashicorp/http-echo args: - "-text=apple" --- kind:...
CVE-2026-126068
A flaw was found in Action Mailbox. The Mailgun ingress controller fails to reject incoming webhook requests with timestamps set in the future and concatenates authentication parameters without a separator when verifying the Hash-based Message Authentication Code HMAC signature. A remote attacker...
CVE-2026-77180
A flaw was found in NGINX Ingress Controller. When configured with Ingress annotations, an injection vulnerability in the configuration generator allows an authenticated attacker with specific permissions to craft values that inject arbitrary NGINX configuration directives. This can enable the...
CLEANSTART-2026-QS30975 Contour is a Kubernetes ingress controller using Envoy proxy
CVE-2026-50149 affects multiple packages. Contour is a Kubernetes ingress controller using Envoy proxy. See references for individual vulnerability details...
CLEANSTART-2026-CF12718 Contour is a Kubernetes ingress controller using Envoy proxy
CVE-2026-41246 affects multiple packages. Contour is a Kubernetes ingress controller using Envoy proxy. See references for individual vulnerability details...
CVE-2026-94197
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller NIC when configured with the ExternalAuth policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and...
CVE-2026-104939
Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external...
CVE-2026-104939
Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external...
CVE-2026-104939 NGINX Ingress Controller vulnerability
Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external...
CVE-2026-104939 NGINX Ingress Controller vulnerability
Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external...
EUVD-2026-101122
Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external...
CVE-2026-104939
The NGINX Ingress Controller is affected by a vulnerability (CWE-303) involving the incorrect implementation of an authentication algorithm . Specifically, the controller may mishandle HTTP responses from an OAuth Identity Provider (IdP) when implementing an externalAuth policy for ingress. This ...
CVE-2026-94197 NGINX Ingress Controller vulnerability
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller NIC when configured with the ExternalAuth policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and...
CVE-2026-94197 NGINX Ingress Controller vulnerability
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller NIC when configured with the ExternalAuth policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and...
CVE-2026-94197
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller NIC when configured with the "ExternalAuth" policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and...
EUVD-2026-101118
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller NIC when configured with the ExternalAuth policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and...
CVE-2026-94197
An authentication and authorization bypass vulnerability exists in the F5 NGINX Ingress Controller when configured with the ExternalAuth policy or Ingress external authentication. The root cause is the unsanitized forwarding of client-supplied headers, specifically X-Forwarded-Prefix , X-Forwarde...