Nginx Ingress Controller CVE-2026-1642

Configuration injection in F5 NGINX Ingress Controller lets an authenticated Kubernetes user with rights to create or mo

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and

Denial of service in F5 NGINX Ingress Controller allows an authenticated remote attacker holding write access to Ingress

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and

NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_hls_module that might allow a l

In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obt

A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not chec