Known Vulnerabilities for Ingress-nginx by Kubernetes
Listed below are 9 of the newest known vulnerabilities associated with "Ingress-nginx" by "Kubernetes".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121966 json | Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requests)... | Not Provided | 2026-11-04 | 2026-11-04 |
| CVE-2026-119573 json | Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cross-n... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119572 json | Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX provide... | Not Provided | 2026-10-30 | 2026-11-05 |
| CVE-2026-116472 json | A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denia... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-114640 json | Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider t... | Not Provided | 2026-10-22 | 2026-10-28 |
| CVE-2026-114638 json | Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider that... | Not Provided | 2026-10-22 | 2026-10-23 |
| CVE-2026-114636 json | Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP rou... | Not Provided | 2026-10-22 | 2026-10-28 |
| CVE-2026-104939 json | Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress ... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-94197 json | An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configur... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-88877 json | Traefik is a HTTP reverse proxy and load balancer. In versions >= v3.7.0 and <= v3.7.11, the Kubernetes ingress-nginx provide... | Not Provided | 2026-09-10 | 2026-10-08 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Kubernetes | Ingress-nginx | 0.9.6 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.5 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.4 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.3 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.2 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.1 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 |