CVE-2026-4342

highpriority · attend · 46EPSS 0.014 · 73 %ileexploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

1.45% (73rd) EPSS

CVSS 8.8 · high

Is it mine?

17 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9

v3.18.8highAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · jordan@liggitt.netexploitability 2.8 · impact 5.9

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · OSV

v3.18.3highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USCWE-20USCWE-20US

exploits (1)

Public proof-of-concept and weaponised exploit code.

stuartMoorhouse/CVE-2026-4342stuartMoorhouse/CVE-2026-4342PoC · poc_in_github

affected products (17)

Products and version ranges known to be affected.

Open Source Kubernetes ingress-nginx <1.13.9all versionscert_bundDE
Open Source Kubernetes ingress-nginx <1.14.5all versionscert_bundDE
Open Source Kubernetes ingress-nginx <1.15.1all versionscert_bundDE
Open Source Kubernetes≤ ingress-nginx <1.14.5cert_bundDE
Open Source Kubernetes≤ ingress-nginx <1.13.9cert_bundDE
Open Source Kubernetes≤ ingress-nginx <1.15.1cert_bundDE
Kubernetes ingress-nginx0 → 1.13.9enisa_euvdEU
Kubernetes ingress-nginx0 → 1.14.5enisa_euvdEU
Kubernetes ingress-nginx0 → 1.15.1enisa_euvdEU
The Kubernetes Authors ingress-nginx≤ 1.15.1fstec_bduRU
The Kubernetes Authors ingress-nginx≤ 1.14.5fstec_bduRU
The Kubernetes Authors ingress-nginx≤ 1.13.9fstec_bduRU
ООО «Ред Софт» РЕД ОС≤ 8.0fstec_bduRU
kubernetes nginx ingress controller< 1.13.9nvdUScpe:2.3:a:kubernetes:nginx_ingress_controller:*:*:*:*:*:*:*:*
kubernetes nginx ingress controller1.14.0 → 1.14.5nvdUScpe:2.3:a:kubernetes:nginx_ingress_controller:*:*:*:*:*:*:*:*
kubernetes nginx ingress controller= 1.15.0nvdUScpe:2.3:a:kubernetes:nginx_ingress_controller:*:*:*:*:*:*:*:*
Go k8s.io/ingress-nginx< 0.0.0-20260319175635-5183b7d86137osvUSpkg:golang/k8s.io/ingress-nginx

advisories (3)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-0801Kubernetes (ingress-nginx): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode und die Offenlegung von InformationenDeutsch2026-03-19csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kubernetes (ingress-nginx) ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen und vertrauliche Informationen offenzulegen.
GHSA-f53h-mxv9-cp98ingress-nginx comment-based nginx configuration injection2026-03-20ghsa · osvUS
A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
GO-2026-4796ingress-nginx comment-based nginx configuration injection in k8s.io/ingress-nginx2026-03-23vendor · osvUS
ingress-nginx comment-based nginx configuration injection in k8s.io/ingress-nginx

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund nvd NVD CVE.org MITRE

published 2026-03-19modified 2026-06-17

references (6)

External citations — patches, advisories, analysis.

http://www.openwall.com/lists/oss-security/2026/03/19/9 cnnvd
https://github.com/kubernetes/kubernetes/issues/137893 cnnvd
https://kubernetes.io/Patchcnnvd
https://github.com/kubernetes/kubernetes/issues/137893 enisa_euvd
http://www.openwall.com/lists/oss-security/2026/03/19/9Mailing ListThird Party Advisorynvd
https://github.com/kubernetes/kubernetes/issues/137893Issue Trackingnvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan