As cited
Copy frozen at (site build).
vulnerabilities
[kubernetes] CVE-2026-116472: ingress-nginx mirror-target self-DOS
CVE-2026-116472 is a denial of service vulnerability in ingress-nginx that allows users with Ingress creation permissions to disrupt the ingress-nginx data plane or potentially redirect traffic between Ingresses. Kubernetes clusters relying on ingress-nginx are affected, and the upstream Kubernetes project will not issue a fix since ingress-nginx maintenance ended in March 2026. SUSE has provided a patch.
Why it matters: Organizations running ingress-nginx should apply SUSE's patch immediately, as any user with permission to create Ingress objects can trigger denial of service or traffic manipulation attacks.
- Source published
- First seen by Cybersecurity Tracker