| CVE-2026-104939 |
Description
NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress
|
7.5
High
|
Oct 14, 2026 |
| CVE-2026-94197 |
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when…
|
7.5
High
|
Oct 14, 2026 |
| CVE-2026-77180 |
When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the…
|
8.3
High
|
Sep 2, 2026 |
| CVE-2026-52865 |
When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with…
|
6.5
Medium
|
Jul 15, 2026 |
| CVE-2026-55723 |
When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress annotations, an injection…
|
8.3
High
|
Jul 15, 2026 |
| CVE-2025-14727 |
NGINX Ingress Controller vulnerability
|
8.3
High
|
Dec 17, 2025 |
| CVE-2024-10318 |
A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not…
|
5.4
Medium
|
Nov 6, 2024 |
| CVE-2022-30535 |
In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can…
|
6.5
Medium
|
Aug 4, 2022 |