Ingress

Cybersecuritynews •Abinaya • February 4, 2026

A critical security vulnerability has been discovered in ingress-nginx, a popular Kubernetes ingress controller, that could allow authenticated attackers to execute arbitrary code and access sensitive cluster secrets. The vulnerability, tracked as CVE-2026-24512, affects multiple versions of the software and requires immediate action from administrators. The security flaw exists in the rules.http.paths.path field of the Ingress resource, which […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in Ingress-NGINX Exposes Kubernetes Clusters A critical security vulnerability, tracked as CVE-2026-24512, has been identified in ingress-nginx, affecting multiple versions of this widely used Kubernetes ingress controller. The flaw allows authenticated attackers to execute arbitrary code and access sensitive cluster secrets, necessitating immediate action from administrators to mitigate potential risks. 2 sources 45

Extracted Entities

Ingress

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (2)