How many nginx kubernetes-ingress CVEs are in CISA KEV?

None of nginx kubernetes-ingress's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of nginx kubernetes-ingress are affected?

3 distinct nginx kubernetes-ingress versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in nginx kubernetes-ingress CVEs?

nginx kubernetes-ingress's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-125 (Out-of-bounds Read), CWE-416 (Use After Free), CWE-290 (Authentication Bypass by Spoofing).

How many critical nginx kubernetes-ingress vulnerabilities are there?

nginx kubernetes-ingress has 3 critical and 3 high-severity CVEs.

What is the average severity of nginx kubernetes-ingress CVEs?

The average CVSS base score across nginx kubernetes-ingress's scored CVEs is 7.6.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

nginx

11 CVEs

nginx kubernetes-ingress Vulnerabilities

Name: nginx kubernetes-ingress vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for kubernetes-ingress by nginx.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

7.6

Avg CVSS

2026–2026

Last updated July 15, 2026

Overview

nginx kubernetes-ingress has 11 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting nginx kubernetes-ingress, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of nginx kubernetes-ingress's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High3

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of nginx kubernetes-ingress's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of nginx kubernetes-ingress's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every nginx kubernetes-ingress version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

4.0.011 CVEs
4.0.111 CVEs

Fixed in

814710cbaf43c9a37baed249feec0db5f0868fa92 CVEs

Find a version

11 CVEs

Sort

NGINX Ingress Controller vulnerability
CVE-2026-52865
Patch
CWE-476
High · CVSS 7.1
EPSS 0.3% (21th pct)2026-07-15
NGINX Ingress Controller vulnerability
CVE-2026-55723
Patch
CWE-76
High · CVSS 8.7
EPSS 0.3% (22th pct)2026-07-15
NGINX ngx_http_charset_module vulnerability
CVE-2026-48142
Patch
CWE-125
Medium · CVSS 6.3
EPSS 0.7% (49th pct)2026-06-17
NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability
CVE-2026-42055
Patch
Workaround
CWE-122
Critical · CVSS 9.2
EPSS 4.0% (90th pct)2026-06-17
NGINX Open-Source ngx_http_v3_module vulnerability
CVE-2026-42530
Public exploit
Patch
Workaround
CWE-416
Critical · CVSS 9.2
EPSS 3.7% (89th pct)2026-06-17
NGINX ngx_http_proxy_v2_module vulnerability
CVE-2026-42926
Patch
CWE-172
Medium · CVSS 6.3
EPSS 0.3% (26th pct)2026-05-13
NGINX ngx_quic_module vulnerability
CVE-2026-40460
Patch
CWE-290
Medium · CVSS 6.9
EPSS 0.4% (29th pct)2026-05-13
NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
CVE-2026-42946
Patch
CWE-823
High · CVSS 8.3
EPSS 0.9% (57th pct)2026-05-13
NGINX ngx_http_charset_module vulnerability
CVE-2026-42934
Patch
CWE-125
Medium · CVSS 6.3
EPSS 0.7% (50th pct)2026-05-13
NGINX ngx_http_rewrite_module vulnerability
CVE-2026-42945
Public exploit
Patch
CWE-122
Critical · CVSS 9.2
EPSS 61.5% (99th pct)2026-05-13
NGINX ngx_http_ssl_module vulnerability
CVE-2026-40701
Patch
CWE-416
Medium · CVSS 6.3
EPSS 0.7% (49th pct)2026-05-13

Common weakness types

The CWE weakness categories most often found in nginx kubernetes-ingress CVEs. Follow any weakness for its full explanation.

Other nginx products

Browse vulnerabilities for other products by nginx.

nginx47 CVEs njs45 CVEs nginx-gateway-fabric12 CVEs agent2 CVEs

All nginx vulnerabilities

Frequently asked questions

Common questions about nginx kubernetes-ingress vulnerabilities.

How many CVEs does nginx kubernetes-ingress have?: nginx kubernetes-ingress has 11 published CVE records since 2026.
How many nginx kubernetes-ingress CVEs are in CISA KEV?: None of nginx kubernetes-ingress's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for nginx kubernetes-ingress vulnerabilities?: Yes — 2 of nginx kubernetes-ingress's CVEs have a known public exploit.
Which versions of nginx kubernetes-ingress are affected?: 3 distinct nginx kubernetes-ingress versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in nginx kubernetes-ingress CVEs?: nginx kubernetes-ingress's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-125 (Out-of-bounds Read), CWE-416 (Use After Free), CWE-290 (Authentication Bypass by Spoofing).
How many critical nginx kubernetes-ingress vulnerabilities are there?: nginx kubernetes-ingress has 3 critical and 3 high-severity CVEs.
What is the average severity of nginx kubernetes-ingress CVEs?: The average CVSS base score across nginx kubernetes-ingress's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track nginx kubernetes-ingress vulnerabilities

Monitor new nginx kubernetes-ingress vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing