Records127All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high49CVSS 7.0–8.9
Exploited now
Kubernetes records in CISA KEVNo Kubernetes vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 43
A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01481 · Published 2026-03-19 · Fixed in 1.13.9, 1.14.5 +2 CWE-20
Priority LOW 26
Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01138 · Published 2020-01-14 · Fixed in 1.5 CWE-215
