6.5
Medium
CVE-2022-30535 In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can…
Description
In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obtain the secrets available to the NGINX Ingress Controller. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| NGINX Ingress Controller 2 | 2.x → < 2.3.0 | 2.3.0 |
| NGINX Ingress Controller 1.0 | 1.0.0 → latest | No fix stated |
References
- support.f5.com support.f5.com
Timeline
- Published
- Last modified
Other CVEs of NGINX Ingress Controller
The 8 CVEs of NGINX Ingress Controller →
CVE-2026-104939
Description
NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress
7.5
High
CVE-2026-94197
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when…
7.5
High
CVE-2026-77180
When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the…
8.3
High
CVE-2026-52865
When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with…
6.5
Medium