CVE-2026-24514
ingress-nginx Admission Controller denial of service
MEDIUM 6.5EPSS 0.5%
A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx controller pod being killed or the node running out of memory.
- Affected
- Kubernetes · ingress-nginx
- CVSS v3.1 LIGGITT
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- 0.52% chance of exploitation in the next 30 days, 43rd percentile
- Published
- 2026-02-03
- Updated
- 2026-02-18
Proof-of-concept exploits (1)
- mbanyamer/cve-2026-24514-Kubernetes-Dos0★ · 2026-02-20