Exploitation observed; activity peaked at 5 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
Priority
HIGH
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-02 | 1 | General1 |
| 2026-02-03 | 5 | Disclosure3General2 |
| 2026-02-04 | 5 | Disclosure1General1Patch3 |
| 2026-02-05 | 1 | General1 |
| 2026-02-06 | 3 | Disclosure1General1PoC1 |
| 2026-02-08 | 1 | Disclosure1 |
| 2026-02-09 | 1 | Patch1 |
| 2026-02-12 | 1 | Disclosure1 |
| 2026-03-11 | 2 | Active Exploitation1Disclosure1 |
| 2026-03-17 | 1 | Disclosure1 |
| 2026-03-18 | 2 | Disclosure1General1 |
| 2026-04-14 | 1 | Patch1 |
| 2026-04-19 | 1 | Disclosure1 |
| 2026-08-07 | 1 | Patch1 |
CVE-2026-24512: ingress-nginx rules.http.paths.path nginx configuration injection - https://github.com/kubernetes/kubernetes/issues/136678
Post summary
The post references CVE-2026-24512, describing an ingress‑nginx configuration injection flaw and points to a GitHub issue for further details.
Le monde Kubernetes/ingress-nginx en sueurs ... Grosse vulnérabilité découverte : CVE-2026-24512 https://cyberpress.org/ingress-nginx-vulnerability-allows-attackers-to-execute-arbitrary-code/
Post summary
A new Kubernetes/ingress-nginx vulnerability (CVE-2026-24512) is reported, but the brief excerpt offers no detailed technical information or evidence of exploitation.
🚨 Kubernetes alert: ingress-nginx vulnerabilities could lead to config injection and potential RCE. Sysdig Threat Research analyzed: • CVE-2026-3288 (CVSS 8.8) • CVE-2026-24512 Missing input sanitization lets attackers inject nginx directives via Ingress paths. Impact: RCE, secret exposure, traffic hijacking. Full analysis ↓ http://www.sysdig.com/blog/detecting-cve-2026-3288-cve-2026-24512-ingress-nginx-configuration-injection-vulnerabilities-for-kubernetes
Post summary
Sysdig’s blog discloses that CVE‑2026‑3288 and CVE‑2026‑24512 allow attackers to inject nginx directives via Ingress paths, leading to potential RCE on Kubernetes clusters; no PoC or active exploitation is reported.
CVE-2026-24512: ingress-nginx rules.http.paths.path nginx configuration injection - https://github.com/kubernetes/kubernetes/issues/136678
Post summary
CVE-2026-24512 is identified as a configuration injection flaw in ingress-nginx, but the provided text lacks evidence of PoC, exploit code, active attacks, or mitigation steps.
is it appropriate to announce FOUR cves in a product that you sent a threatening note literally last week was going to be deprecated and you don't have the builds ready yet? CVE-2026-1580 CVE-2026-24512 CVE-2026-24513 CVE-2026-24514 - kubernetes is a total joke https://t.co/p76bIAk5SX
Post summary
The tweet merely lists four CVE identifiers and criticizes Kubernetes, providing no technical details, PoCs, exploits, patches, or evidence of active exploitation.
We were acknowledged for CVE-2026-24512 vulnerability (8.8) on Nginx-Ingress controller with @cousky_. H1 report disclosure is on-going. It ended up being a pretty funny Lua script restriction bypass. #security #k8s
Post summary
The tweet announces CVE-2026-24512 on Nginx‑Ingress with a Lua script bypass PoC; no patch or active exploitation is reported.
Ingress-NGINX の脆弱性 CVE-2026-24512 が FIX：任意のコード実行の恐れ https://iototsecnews.jp/2026/02/04/ingress-nginx-vulnerability-allow-attackers-to-execute-arbitrary-code/ この問題の原因は、Kubernetes のネットワークの入り口を管理する Ingress-NGINX において、設定項目の一部 (pathフィールド) に入力された内容のチェックが不十分だったことにあります。この不備がある状態で、攻撃者が特定の細工を施した設定 (Ingressリソース) を登録すると、本来は安全に保たれるべきサーバの設定ファイルの中に、悪意のある命令を紛れ込ませることが可能になります。この原因により、攻撃者はサーバ上でのプログラム実行や、クラスター内に保管されている機密情報の窃取が可能になります。ご利用のチームは、ご注意ください。 #CVE202624512 #nginx #Vulnerability
Post summary
The article reports that CVE-2026-24512 in Ingress‑NGINX permits attackers to inject malicious commands via the path field, leading to arbitrary code execution, but offers no information on patches, exploits, or active use.
Kubernetes: Multiple issues in ingress-nginx https://www.openwall.com/lists/oss-security/2026/02/02/3 Multiple issues are recently disclosed in ingress-nginx, and assigned CVE-2026-1580, CVE-2026-24512, CVE-2026-24513, CVE-2026-24514. The most serious of these issues have been rated HIGH, CVSS 8.8.
Post summary
Several CVEs (CVE-2026-1580, 2026-24512, 2026-24513, 2026-24514) have been disclosed for ingress-nginx with high severity (CVSS 8.8), but no PoC, exploit, or patch information is provided.
💡 CVE-2026-24512: la vulnerabilità di ingress-NGINX che minaccia i cluster Kubernetes https://gomoot.com/cve-2026-24512-la-vulnerabilita-di-ingress-nginx-che-minaccia-i-cluster-kubernetes/ #news #sicurezza #tech https://t.co/X0b6imSzrT
Post summary
A tweet linking to a news article about CVE‑2026‑24512, a Kubernetes cluster vulnerability, without providing additional details.
🚨 CVE-2026-24512 — CVE-2026-24512. Actively exploited in the wild. Thread 👇
Post summary
The tweet confirms that CVE-2026-24512 is being actively exploited in the wild, with a reference to a thread for additional context.
CVE-2026-24512 #devopsish #kubernetes #cve https://github.com/kubernetes/kubernetes/issues/136678
Post summary
The post references CVE-2026-24512 and links to a GitHub issue, but provides no further information about the vulnerability or its exploitation.
🚨 New from Sysdig Threat Research Team: 2 ingress-nginx vulnerabilities (CVE-2026-3288, CVE-2026-24512) could allow configuration injection and potential RCE in K8s Root cause: missing input sanitization in Ingress path translation Deep dive & guidance https://okt.to/nzs3GE https://t.co/dX2JmxzTCy
Post summary
Sysdig’s Threat Research Team announces two ingress‑nginx CVEs (CVE‑2026‑3288, CVE‑2026‑24512) that allow configuration injection and potential RCE due to missing input sanitization.
What it is: CVE-2026-24512 is classified as a security issue within the ingress-nginx component. The root cause involves improper input validation (CWE-20) where the `rules.http.paths.path` Ingress field can be exploited to inject configuration directly into nginx. This flaw was…
Post summary
The text announces CVE-2026-24512 as a security issue in ingress-nginx, describing improper input validation that could lead to configuration injection, but it lacks details on PoC, exploits, active use, or remediation.
Warning: #Kubernetes disclosed four vulnerabilities in the #ingress-nginx, including two high-severity issues: #CVE-2026-1580 (improper input validation) and #CVE-2026-24512 (configuration injection), enabling #RCE and authentication bypass. https://ccb.belgium.be/advisories/warning-multiple-vulnerabilities-kubernetes-ingres-nginx #Patch
Post summary
The advisory announces four high‑severity vulnerabilities in ingress‑nginx, including RCE and authentication bypass, and confirms that patches are available.
⚠️ Vulnerabilidades en Ingress-NGINX ❗ CVE-2026-24512 ❗ CVE-2026-1580 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-ingress-nginx/ https://t.co/TrYFac4pTk
Post summary
The tweet announces two CVEs affecting Ingress‑NGINX and directs readers to external links for details, but provides no evidence of exploitation, PoC, or mitigation.
CVE-2026-24512: la vulnerabilità di ingress-NGINX che minaccia i cluster Kubernetes https://gomoot.com/cve-2026-24512-la-vulnerabilita-di-ingress-nginx-che-minaccia-i-cluster-kubernetes/ #news #sicurezza #tech https://t.co/QnZBrg9NEu
Post summary
The tweet mentions CVE‑2026‑24512, a vulnerability in ingress‑NGINX that threatens Kubernetes clusters, but it offers no technical details, PoC, or patch information.
CVE-2026-24512 A security issue was discovered in ingress-nginx cthe `rules.http.paths.path` Ingress field can be used to inject configuration into nginx. This can lead to arbitrary… https://www.cve.org/CVERecord?id=CVE-2026-24512
Post summary
A configuration‑injection vulnerability was identified in ingress‑nginx that allows arbitrary configuration changes in nginx via the `rules.http.paths.path` field.
[CVE-2026-24512: HIGH] Ingress-nginx security alert: Exploitable vulnerability found in `rules.http.paths.path` field, allowing potential code execution and disclosure of Secrets. Upgrade recommended.#cve,CVE-2026-24512,#cybersecurity https://cvefind.com/CVE-2026-24512
Post summary
A high‑severity alert for CVE‑2026‑24512 identifies a potential code execution flaw in Ingress‑nginx, recommending an upgrade to mitigate the risk.
https://discuss.kubernetes.io/t/security-advisory-multiple-issues-in-ingress-nginx/34115 Multiple issues are disclosed today in ingress-nginx, assigned the following CVE IDs: CVE-2026-1580, CVE-2026-24512, CVE-2026-24513, CVE-2026-24514 This issue affects ingress-nginx. Affected ingress-nginx: < v1.13.7 & ingress-nginx: < v1.14.3 #infosec
Post summary
The post is a security advisory that announces several CVEs affecting older ingress‑nginx releases, but it contains no further technical detail or mitigation information.
🔗 CVE-2026-24512: ingress-nginx rules.http.paths.path nginx configuration injection https://github.com/kubernetes/kubernetes/issues/136678
Post summary
A new CVE (CVE-2026-24512) concerning ingress-nginx configuration injection is cited via a GitHub issue, with no PoC, exploit, or patch details provided.