Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx controller pod being killed or the node running out of memory.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-02 | 1 | General1 |
| 2026-02-03 | 4 | Disclosure2General2 |
| 2026-02-04 | 2 | Disclosure2 |
| 2026-02-08 | 1 | Disclosure1 |
CVE-2026-24514: ingress-nginx Admission Controller denial of service - https://github.com/kubernetes/kubernetes/issues/136680
Post summary
The entry points to CVE-2026-24514, noting a denial‑of‑service flaw in ingress‑nginx's Admission Controller and linking to a GitHub issue, but provides no further exploit or mitigation details.
CVE-2026-24514: ingress-nginx Admission Controller denial of service - https://github.com/kubernetes/kubernetes/issues/136680
Post summary
The text announces a denial‑of‑service vulnerability (CVE‑2026‑24514) in the ingress‑nginx Admission Controller and links to a GitHub issue for further details.
is it appropriate to announce FOUR cves in a product that you sent a threatening note literally last week was going to be deprecated and you don't have the builds ready yet? CVE-2026-1580 CVE-2026-24512 CVE-2026-24513 CVE-2026-24514 - kubernetes is a total joke https://t.co/p76bIAk5SX
Post summary
The tweet merely lists four CVE identifiers with no further detail, patch information, or evidence of exploitation, offering no actionable intelligence.
Kubernetes: Multiple issues in ingress-nginx https://www.openwall.com/lists/oss-security/2026/02/02/3 Multiple issues are recently disclosed in ingress-nginx, and assigned CVE-2026-1580, CVE-2026-24512, CVE-2026-24513, CVE-2026-24514. The most serious of these issues have been rated HIGH, CVSS 8.8.
Post summary
Multiple high‑severity CVEs (CVE‑2026‑1580, CVE‑2026‑24512, CVE‑2026‑24513, CVE‑2026‑24514) affecting Kubernetes ingress‑nginx were recently disclosed, with a CVSS score of 8.8.
CVE-2026-24514 A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large reque… https://www.cve.org/CVERecord?id=CVE-2026-24514
Post summary
The post discloses a denial‑of‑service flaw in ingress‑nginx’s validating admission controller, triggered by large requests, but offers no evidence of active exploitation, patches, or PoC.
https://discuss.kubernetes.io/t/security-advisory-multiple-issues-in-ingress-nginx/34115 Multiple issues are disclosed today in ingress-nginx, assigned the following CVE IDs: CVE-2026-1580, CVE-2026-24512, CVE-2026-24513, CVE-2026-24514 This issue affects ingress-nginx. Affected ingress-nginx: < v1.13.7 & ingress-nginx: < v1.14.3 #infosec
Post summary
The advisory announces multiple newly disclosed CVEs (CVE-2026-1580, CVE-2026-24512, CVE-2026-24513, CVE-2026-24514) affecting ingress‑nginx versions below v1.13.7 and v1.14.3, without providing additional technical or mitigation details.
CVE-2026-24514 #devopsish #kubernetes #cve https://github.com/kubernetes/kubernetes/issues/136680
Post summary
The tweet references CVE-2026-24514 with a link to a GitHub issue but provides no details on exploitation, patches, or technical specifics.
⏳ With EOL in March, Ingress #NGINX has 4 newly disclosed vulnerabilities: 🔴 CVE-2026-1580 and CVE-2026-24512 allow for configuration injection via the "http://nginx.ingress.kubernetes.io/auth-method" ingress annotation and the "rules.http.paths.path" ingress field, respectively 🟡 CVE-2026-24514 is a #DoS in the ingress-nginx admission controller, triggered by sending large requests. ⚪ CVE-2026-24513 is a bypass of the protection afforded by the "auth-url" ingress when a misconfiguration is in place. We recommend that you migrate to F5's NGINX Ingress: https://github.com/nginx/kubernetes-ingress If you can’t migrate yet, update to v1.14.3.
Post summary
The post announces four new CVEs in ingress‑nginx, describing their impact and recommending a version 1.14.3 update.