Skip to content
OpenAdvisories

Product · F5

NGINX Ingress Controller

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-52865

    NGINX Ingress Controller vulnerability

    When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission to create or modify Ingress or TransportServer resources can cause the NGINX Ingress Controller process to terminate. Impact: The N…

    F5 NGINX Ingress Controller Network devices
  • Medium 5.4
    CVE-2024-10318

    NGINX OpenID Connect Vulnerability

    A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an attacker to fix a victim's session to an attacker-controlled account. As a result, although the atta…

    F5 NGINX Ingress Controller NGINX Instance Manager NGINX API Connectivity Manager Network devices
  • Medium 6.5
    CVE-2022-30535

    NGINX Ingress Controller vulnerability CVE-2022-30535

    In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obtain the secrets available to the NGINX Ingress Controller. Note: Software versions which have reached End of Technical Support (EoTS) are n…

    F5 NGINX Ingress Controller Network devices