WID-SEC-W-2026-0650

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Kubernetes (ingress-nginx): Schwachstelle ermöglicht Codeausführung

view advisory published 2026-03-09

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kubernetes (ingress-nginx) ausnutzen, um beliebigen Programmcode auszuführen.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-3288US—Exploit
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan