1400 matches found
ingress-nginx
Einstellung von Ingress NGINX Einstellung Was Sie über die Einstellung von Ingress NGINX wissen müssen: Die Wartung nach bestem Bemühen wird bis März 2026 fortgesetzt. Danach gibt es keine weiteren Releases, keine Fehlerbehebungen und keine Aktualisierungen zur Behebung etwaiger entdeckter...
ingressnightmare-detection-poc
Strumento di Rilevamento IngressNightmare Panoramica Questo strumento fornisce una capacità di rilevamento non intrusiva per la catena di vulnerabilità IngressNightmare CVE-2025-1974 che colpisce Ingress NGINX Controller. Nello specifico sfrutta il vettore di iniezione tramite l'annotazione...
CVE-2025-1974
DEMO https://youtu.be/3hYlHeaf2mQ Was ist CVE-2025-1974? CVE-2025-1974 IngressNightmare ist eine kritische CVSS 9.8 ohne Authentifizierung ausnutzbare Remote-Code-Ausführungs-Schwachstelle im Kubernetes ingress-nginx Admission Controller. Angriffsablauf: 1. Upload : Senden einer schädlichen Share...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-switch, Create ingress ACL when needed Currently, the ingress ACL is used for three features. It is created only when the vport metadata match and the prio tag is enabled. However, the active-backup lag mode also uses...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: cass-operator, keda, kubernetes-csi-external-health-monitor, flux-notification-controller, kwok, k3s, hubble-ui, pulumi-kubernetes-operator, calico, kubernetes-csi-external-provisioner, kyverno-notation-aws, apisix-ingress-controller, kube-metrics-adapter,...
CVE-2026-50149
Contour is a Kubernetes ingress controller using Envoy proxy. In versions 1.23.0 through 1.33.4, when an HTTPProxy is configured with incompatible combination of both .spec.virtualhost.tls.enableFallbackCertificate: true and .spec.virtualhost.jwtProviders, Contour does not reject the configuratio...
CVE-2026-50149
Contour (Kubernetes ingress controller using Envoy proxy) versions 1.23.0 through 1.33.4 contain a JWT verification bypass . When an HTTPProxy resource is configured with both .spec.virtualhost.tls.enableFallbackCertificate: true and .spec.virtualhost.jwtProviders, Contour accepts the incompatibl...
CVE-2026-50149 Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled
Contour is a Kubernetes ingress controller using Envoy proxy. In versions 1.23.0 through 1.33.4, when an HTTPProxy is configured with incompatible combination of both .spec.virtualhost.tls.enableFallbackCertificate: true and .spec.virtualhost.jwtProviders, Contour does not reject the configuratio...
EUVD-2026-62414
Contour is a Kubernetes ingress controller using Envoy proxy. In versions 1.23.0 through 1.33.4, when an HTTPProxy is configured with incompatible combination of both .spec.virtualhost.tls.enableFallbackCertificate: true and .spec.virtualhost.jwtProviders, Contour does not reject the configuratio...
CVE-2026-50149 Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled
Contour is a Kubernetes ingress controller using Envoy proxy. In versions 1.23.0 through 1.33.4, when an HTTPProxy is configured with incompatible combination of both .spec.virtualhost.tls.enableFallbackCertificate: true and .spec.virtualhost.jwtProviders, Contour does not reject the configuratio...
UBUNTU-CVE-2026-72253
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: validate skbdst before accessing it tc ingress and openvswitch do not guarantee routing information to be available. These subsystems use the conntrack helper infrastructure, and the SIP helper relies o...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: blob-csi, jaeger-operator, mountpoint-s3-csi-driver, rekor, flux-notification-controller, kubewatch, seaweedfs, dgraph, azurefile-csi, pulumi-language-java, vault-env, cert-manager-webhook-pdns, pvc-autoresizer, flyte, harbor-registry, kubernetes-dashboard-web,...
PT-2026-72441
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf conntrack sip: validate skb dst before accessing it tc ingress and openvswitch do not guarantee routing information to be available. These subsystems use the conntrack helper infrastructure, and the SIP helper relie...
GO-2025-3565 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2025-3564 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2024-2428 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2026-4419 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2026-4423 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...