F5 nginx Ingress Controller
8 CVEs affecting F5 nginx Ingress Controller. Latest disclosed: 2026-10-14. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-77180 | High | 8.3 | 2026-09-02 | When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Control… |
CVE-2026-55723 | High | 8.3 | 2026-07-15 | When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress annotations, an injection vulnerability exists in the configurat… |
CVE-2025-14727 | High | 8.3 | 2025-12-17 | A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-target annotation validation. Note: Software versions which have reached End of Techn… |
CVE-2026-94197 | High | 7.5 | 2026-10-14 | An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the `ExternalAuth` policy… |
CVE-2026-104939 | High | 7.5 | 2026-10-14 | Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP… |
CVE-2026-52865 | Medium | 6.5 | 2026-07-15 | When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission to create or modify Ingress or… |
CVE-2022-30535 | Medium | 6.5 | 2022-08-04 | In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obtain the secrets available to the NGINX… |
CVE-2024-10318 | Medium | 5.4 | 2024-11-06 | A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an… |