Known Vulnerabilities for Ingress-nginx by Kubernetes
Listed below are 9 of the newest known vulnerabilities associated with "Ingress-nginx" by "Kubernetes".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-88877 json | Traefik is a HTTP reverse proxy and load balancer. In versions >= v3.7.0 and <= v3.7.11, the Kubernetes ingress-nginx provide... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-85596 json | Traefik versions >= v3.7.0 and <= v3.7.10 contain an authentication bypass in the Kubernetes Ingress NGINX provider. The TLS ... | Not Provided | 2026-09-04 | 2026-09-10 |
| CVE-2026-77180 json | When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration ... | Not Provided | 2026-09-02 | 2026-09-03 |
| CVE-2026-67309 json | Traefik versions >= v3.7.0 and <= v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider's Re... | Not Provided | 2026-08-01 | 2026-08-03 |
| CVE-2026-55723 json | When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress annotations, an injection vuln... | Not Provided | 2026-07-15 | 2026-07-16 |
| CVE-2026-54762 json | Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium severity vulnerability in ... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-52865 json | When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permissi... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-3288 json | Not Provided | 2026-03-09 | 2026-05-06 | |
| CVE-2023-5044 json | Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation. | 8.8 - HIGH | 2023-10-25 | 2023-11-02 |
| CVE-2023-5043 json | Ingress nginx annotation injection causes arbitrary command execution. | 8.8 - HIGH | 2023-10-25 | 2023-11-02 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Kubernetes | Ingress-nginx | 0.9.6 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.5 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.4 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.3 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.2 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.1 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 | |||
| Application | Kubernetes | Ingress-nginx | 0.9.0 |