Kubernetes
Security incidents tagged Kubernetes. Newest first.
0 Kubernetes incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 577
- Longest quiet run: 577 days (Mar 25–Oct 22)
Show 1 older incident1 older incident
March 2025 1
CriticalIngressNightmare: unauthenticated RCE in Kubernetes ingress-nginx admission controller (CVE-2025-1974)Patched
Kubernetes ingress-nginx controller Patched
Wiz found that the ingress-nginx admission webhook could be made to load attacker config and run code, giving access to all cluster secrets the controller can read. CVSS 9.8. Fixed in controller v1.12.1 and v1.11.5; otherwise disable the validating webhook.
Open incident →CVE-2025-1974
