Количество 4
Количество 4
CVE-2026-3288
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
GHSA-c56h-j8gw-3v54
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
BDU:2026-02870
Уязвимость контроллера входящего трафика в кластере Kubernetes ingress-nginx, связанная с недостатками механизма проверки входных данных, позволяющая нарушителю выполнить произвольный код
ROS-20260429-73-0040
Уязвимость golang-k8s-ingress-nginx
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-3288 A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.) | CVSS3: 8.8 | 7% Низкий | 5 месяцев назад |
| GHSA-c56h-j8gw-3v54 A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.) | CVSS3: 8.8 | 7% Низкий | 5 месяцев назад |
 | BDU:2026-02870 Уязвимость контроллера входящего трафика в кластере Kubernetes ingress-nginx, связанная с недостатками механизма проверки входных данных, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 7% Низкий | 5 месяцев назад |
 | ROS-20260429-73-0040 Уязвимость golang-k8s-ingress-nginx | CVSS3: 8.8 | 7% Низкий | 3 месяца назад |
Уязвимостей на страницу