Vulnerabilitycritical
IngressNightmare: Four Critical Bugs Found in 40% of Cloud Systems
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-1098+2 related CVEs | Config Injection via Ingress Annotations Enables RCE in ingress-nginx | 8.8 | 83% | ||
| CVE-2025-1974 | Unauthenticated RCE in Kubernetes ingress-nginx controller (IngressNightmare) | 9.8 | 100% |
From the original article
2 min read at infosecurity-magazine.com
Kubernetes customers using the popular Ingress NGINX Controller have been urged to patch four newly discovered remote code execution (RCE) flaws assigned a CVSS score of 9. 8. Dubbed “IngressNightmare” by Wiz Security, the four vulnerabilities impact the admission controller component of the popular open source software, which is designed to route external traffic to the relevant Kubernetes services and pods.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.