Read the docs
TI-2025-13445 Aliases CVE-2025-14727GHSA-qgv6-hgqv-p7cj

NGINX Ingress Controller vulnerability

Priority MEDIUM 40CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-target annotation validation. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00434 37th percentileScored 2026-11-07
Fix Fixed NGINX Ingress Controller (F5): 5.3.1, 5.2.0, 5.1.0 +3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
F5NGINX Ingress Controller5.3.0 to before 5.3.15.3.1, 5.2.0, 5.1.0, 5.0.0, 4.0.0, 3.0.0Patch availableCNA
  • NGINX Ingress Controller VendorF5 Affected 5.3.0 to before 5.3.1 Fixed in 5.3.1, 5.2.0, 5.1.0, 5.0.0, 4.0.0, 3.0.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:f5:nginx_ingress_controller:5.3.0:*:*:*:*:*:*:*5.3.0VulnerableF5
  • cpe:2.3:a:f5:nginx_ingress_controller:5.3.0:*:*:*:*:*:*:* Versions 5.3.0 Vulnerable ·F5

Remediation

  • Fix · CNA NGINX Ingress Controller (F5) Fixed in 5.3.1, 5.2.0, 5.1.0, 5.0.0, 4.0.0, 3.0.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-14727
  2. 2026-10-03 Alias added: GHSA-qgv6-hgqv-p7cj

References

Advisory 1

  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2026-31136 NGINX ngx_http_rewrite_module vulnerability CVSS 4.0CRITICAL 9.2
  • TI-2026-30813 NGINX Map directive and Regex matching vulnerability CVSS 4.0CRITICAL 9.2
  • TI-2026-08132 NGINX ngx_http_rewrite_module vulnerability CVSS 4.0CRITICAL 9.2
  • TI-2026-30812 NGINX Open-Source ngx_http_v3_module vulnerability CVSS 4.0CRITICAL 9.2
  • TI-2026-30432 NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability CVSS 4.0CRITICAL 9.2
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences