CVE-2026-3288-lab

CVE-2026-3288 脆弱性ラボ（Docker） NGINX Ingress Controller 設定インジェクション ⚠️ 警告 : このラボには意図的に脆弱な設定が含まれており、認可されたセキュリティトレーニング専用 です。 脆弱性の概要 CVE-2026-3288 （CVSS 8.8 HIGH）- NGINX Ingress Controller における設定インジェクション 影響を受けるバージョン : v1.13.8、v1.14.4、v1.15.0 攻撃ベクトル : パス設定における二重引用符（"）インジェクション 影響 :...

CVE-2024-7646

CVE-2024-7646 CVE-2024-7646 の PoC root@kitploit: apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: example-ingress annotations: nginx.ingress.kubernetes.io/server-snippet: | addheader X-Pwn-Header "Pwn\r\n HTTP/1.1 200 OK Content-Type: text/html alert'XSS'; --------"; return 200...

Nginx Out-of-band Security Notification (July 15, 2026)

NGINX Security Advisory: NGINX Ingress Controller vulnerability CVE-2026-55723 NGINX Ingress Controller NGINX Ingress Controller vulnerability CVE-2026-52865 NGINX Ingress Controller NGINX Agent vulnerability CVE-2026-60062 NGINX Agent, NGINX Instance Manager NGINX map directive and regex matchin...

CVE-2023-5044

CVE-2023-5044 CVE 2023 5044 の PoC 前提条件 Kind: v0.20.0 Kubectl: v1.29.3 Docker: v26.0.0 PoC Docker に正しい権限を与える root@kitploit: sudo usermod -aG docker $USER && newgrp docker extraPortMaping と node-labels を使用してクラスターを起動し、イングレスに備えます。 root@kitploit: cat EOF | kind create cluster --config=- kind: Cluster...

CVE-2023-5044

CVE-2023-5044 nginx.ingress.kubernetes.io/permanent-redirect アノテーションによるコードインジェクション まず、Pod と Service をデプロイする必要があります: root@kitploit: kind: Pod apiVersion: v1 metadata: name: apple-app labels: app: apple spec: containers: - name: apple-app image: hashicorp/http-echo args: - "-text=apple" --- kind:...

CVE-2026-85596 Traefik v3.7 Authentication Bypass via TLS Option Conflict

Traefik versions = v3.7.0 and = v3.7.10 contain an authentication bypass in the Kubernetes Ingress NGINX provider. The TLS option generated for an Ingress carrying the nginx.ingress.kubernetes.io/auth-tls-secret annotation was named after the Ingress namespace and name. As a result, two Ingress...

CVE-2026-77180

When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without sanitization. An authenticated attacker...

EUVD-2026-70141

When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without sanitization. An authenticated attacker...

CVE-2026-77180

NGINX Ingress Controller is vulnerable to a configuration injection flaw (CWE-76) in its configuration generator. Multiple user-controllable Ingress annotation fields are written into the generated NGINX configuration without sanitization , allowing an authenticated attacker with Kubernetes API w...

CVE-2026-77180 NGINX Ingress Controller vulnerability

When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without sanitization. An authenticated attacker...

CVE-2026-77180 NGINX Ingress Controller vulnerability

When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without sanitization. An authenticated attacker...

K000162601: NGINX Ingress Controller vulnerability CVE-2026-77180

Security Advisory Description When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without...

CVE-2026-77180: Improper Neutralization of Equivalent Special Elements

When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without sanitization. An authenticated attacker...

PT-2026-84762

When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without sanitization. An authenticated attacker...

GO-2025-3565 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

GO-2026-4423 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2026-4417 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2025-3566 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

The vulnerabilities of the Ingress components and Custom Resource Definitions (CRDs) of the NGINX Ingress Controller platform allow a malicious actor to insert arbitrary configuration directives into NGINX, gain unauthorized access to file creation and deletion operations, or trigger service failures.

The vulnerability of the Ingress components and Custom Resource Definitions CRDs of the NGINX Ingress Controller monitoring and management platform is related to the lack of measures taken to neutralize special elements during the processing of string values. Exploiting this vulnerability allows ...

The vulnerability of the Ingress and TransportServer components of the NGINX Ingress Controller platform allows a attacker to cause service interruptions.

The vulnerability of the Ingress and TransportServer components of the NGINX Ingress Controller monitoring and management platform is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause service interruptions...