NGINX Ingress Controller

Reported Context (6)

products affected by these two vulnerabilities, including NGINX Plus, NGINX Open Source, NGINX Ingress Controller, NGINX Gateway Fabric, and NGINX Instance Manager. F5 Releases Out-of-Band Patches for Critical NGINX Vulnerabilities
Two high-severity vulnerabilities addressed in NGINX Ingress Controller could allow authenticated attackers to inject arbitrary NGINX configuration directives to delete files and disable services, or create or modify F5 Patches Eight NGINX and BIG-IP Vulnerabilities
NGINX Ingress Controller 5.0.0 – 5.5.0 F5 Patches Two Critical NGINX Flaws That Could Enable Remote Code Execution
NGINX Ingress Controller 3.5.0 through 3.7.2, 4.0.0 through 4.0.1, and 5.0.0 through 5.4.1 18-Year-Old NGINX Flaw Can Cause DoS, With RCE Demonstrated Under Specific Conditions
NGINX Ingress Controller 3.5.0 – 3.7.2 18-Year-Old NGINX Rewrite Flaw Could Enable Unauthenticated RCE

CVE (12)

People (1)

MITRE ATT&CK (3)

Vendors (2)

Products (12)

Tools (1)

Industries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.