Skip to content
OpenAdvisories
High · 8.3 CVE-2025-14727 EUVD-2025-203903GHSA-qgv6-hgqv-p7cj

NGINX Ingress Controller vulnerability

Published Dec 17, 2025 · Updated Nov 3, 2026 · Assigned by f5

Description

A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-target annotation validation.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 NGINX Ingress Controller 5.3.0 – < 5.3.1 5.3.1

References