https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:50:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06271 bdu:2024-06271 https://cve.radiocsirt.org/vuln/bdu:2024-06271 https://cve.radiocsirt.org/vuln/euvd-2026-159084 EUVD-2026-159084 https://cve.radiocsirt.org/vuln/euvd-2026-159084 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7646 <p>A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.</p> <p>A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-7646 https://cve.radiocsirt.org/vuln/ghsa-qx8j-xj5q-v7r3 <p>A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.</p> <p>A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.</p> https://cve.radiocsirt.org/vuln/ghsa-qx8j-xj5q-v7r3 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1876 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kubernetes im &#34;ingress-nginx controller&#34; ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kubernetes im &#34;ingress-nginx controller&#34; ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1876