9.8
CRITICAL
CVE-2025-1974
Kubernetes Ingress-Nginx Code Execution Vulnerability
Description

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

INFO

Published Date :

March 25, 2025, 12:15 a.m.

Last Modified :

March 27, 2025, 4:45 p.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

3.9
Public PoC/Exploit Available at Github

CVE-2025-1974 has a 38 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2025-1974 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Kubernetes ingress-nginx
: Total Affected Vendor : 1 | Products : 1
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2025-1974.

URL Resource
https://https://github.com/kubernetes/kubernetes/issues/131009

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
laoa1573/wy876

wy876

Python

Updated: 6 days ago
0 stars 1 fork 1 watcher
Born at : April 11, 2025, 4:25 a.m. This repo has been linked 209 different CVEs too.
Profile Photo
Rubby2001/CVE-2025-1974-go

Exploit CVE-2025-1974 with a single file.

Makefile Shell Go C

Updated: 1 week ago
0 stars 0 fork 0 watcher
Born at : April 10, 2025, 7:25 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
paion-data-bot/paion-data-bot

Tech news for Paion Data dev teams

Updated: 1 day, 9 hours ago
0 stars 0 fork 0 watcher
Born at : April 5, 2025, 1:03 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
kubewarden/do-not-expose-admission-controller-webhook-services-policy

A policy that detects webhook services used by admission controller that are accidentally exposed outside of the cluster

admissioncontroller compliance hacktoberfest kubernetes kubernetes-security kubewarden-policy policy-as-code webassembly

Makefile Rust

Updated: 2 days, 16 hours ago
0 stars 0 fork 0 watcher
Born at : March 31, 2025, 4:47 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
zulloper/CVE-2025-1974

CVE-2025-1974 PoC 코드

Python C

Updated: 2 weeks, 2 days ago
0 stars 0 fork 0 watcher
Born at : March 31, 2025, 8:31 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
lufeirider/IngressNightmare-PoC

IngressNightmare-PoC： (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, CVE-2025-1974) PoC ，One-click script 。 一键脚本

Python

Updated: 2 weeks ago
8 stars 5 fork 5 watcher
Born at : March 30, 2025, 8:32 a.m. This repo has been linked 4 different CVEs too.
Profile Photo
gian2dchris/ingress-nightmare-poc

Ingress Nightmare PoC

cve-2025-1974 kubernetes nginx-ingress ingress-nightmare

Python Shell C

Updated: 2 weeks, 2 days ago
0 stars 0 fork 0 watcher
Born at : March 29, 2025, 1:52 p.m. This repo has been linked 4 different CVEs too.
Profile Photo
rjhaikal/POC-IngressNightmare-CVE-2025-1974

POC IngressNightmare (CVE-2025-1974), modified from https://github.com/yoshino-s/CVE-2025-1974

Makefile Shell Python C

Updated: 2 weeks, 5 days ago
0 stars 0 fork 0 watcher
Born at : March 28, 2025, 4:57 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
tuladhar/ingress-nightmare

IngressNightmare (CVE-2025-1974)

Python

Updated: 2 weeks, 6 days ago
0 stars 0 fork 0 watcher
Born at : March 27, 2025, 6:48 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
killsystema/IngressNightmare

None

Python

Updated: 2 weeks, 6 days ago
0 stars 0 fork 0 watcher
Born at : March 27, 2025, 4:50 p.m. This repo has been linked 4 different CVEs too.
Profile Photo
hierynomus/ingressnightmare-policy

KubeWarden Policy that prevents Ingresses with IngressNightmare annotations from being created

Rust

Updated: 2 weeks, 1 day ago
0 stars 0 fork 0 watcher
Born at : March 27, 2025, 10:56 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
0xBingo/CVE-2025-1974

A minimal test tool to help detect annotation injection vulnerabilities in Kubernetes NGINX Ingress controllers. This script sends a crafted AdmissionReview request to simulate a potential exploit path from CVE-2025-1974 and checks for signs of misinterpreted annotations in controller logs.

Python

Updated: 3 weeks ago
0 stars 0 fork 0 watcher
Born at : March 27, 2025, 3:28 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
hakaioffsec/IngressNightmare-PoC

This is a PoC code to exploit the IngressNightmare vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974).

Python C

Updated: 3 days, 5 hours ago
193 stars 41 fork 41 watcher
Born at : March 26, 2025, 6:52 p.m. This repo has been linked 4 different CVEs too.
Profile Photo
hi-unc1e/CVE-2025-1974-poc

PoC of CVE-2025-1974, modified from the world-first PoC~

Python

Updated: 2 weeks, 2 days ago
3 stars 2 fork 2 watcher
Born at : March 26, 2025, 4:54 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
m-q-t/ingressnightmare-detection-poc

Proof-of-Concept Tool to detect IngressNightmare (CVE-2025-1974) via (non-intrusive) active means.

Python

Updated: 3 weeks ago
0 stars 0 fork 0 watcher
Born at : March 26, 2025, 3:44 p.m. This repo has been linked 2 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2025-1974 vulnerability anywhere in the article.

  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 17, 2025 (1 hour, 38 minutes ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 17, 2025 (5 hours, 38 minutes ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 16, 2025 (9 hours, 38 minutes ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 16, 2025 (15 hours, 38 minutes ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 16, 2025 (19 hours, 38 minutes ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 16, 2025 (21 hours, 38 minutes ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 16, 2025 (23 hours, 38 minutes ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 15, 2025 (1 day, 7 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 15, 2025 (1 day, 9 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 15, 2025 (1 day, 11 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 15, 2025 (1 day, 13 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 15, 2025 (1 day, 19 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 15, 2025 (2 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 15, 2025 (2 days, 2 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 15, 2025 (2 days, 6 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 14, 2025 (2 days, 8 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 14, 2025 (2 days, 16 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 14, 2025 (2 days, 22 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 14, 2025 (3 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 14, 2025 (3 days, 6 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 13, 2025 (3 days, 15 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 13, 2025 (3 days, 21 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 13, 2025 (3 days, 23 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 12, 2025 (4 days, 10 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 12, 2025 (4 days, 12 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 12, 2025 (4 days, 16 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 12, 2025 (4 days, 23 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 11, 2025 (5 days, 8 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 11, 2025 (5 days, 14 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 11, 2025 (5 days, 16 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 11, 2025 (5 days, 20 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 11, 2025 (5 days, 22 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 11, 2025 (6 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 10, 2025 (6 days, 12 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 10, 2025 (6 days, 14 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 10, 2025 (6 days, 16 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 10, 2025 (6 days, 18 hours ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 10, 2025 (1 week ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 10, 2025 (1 week ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 10, 2025 (1 week ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 09, 2025 (1 week ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 09, 2025 (1 week ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 09, 2025 (1 week ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 09, 2025 (1 week ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 09, 2025 (1 week ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 09, 2025 (1 week, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 09, 2025 (1 week, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 09, 2025 (1 week, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 08, 2025 (1 week, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 08, 2025 (1 week, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 08, 2025 (1 week, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 08, 2025 (1 week, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 08, 2025 (1 week, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 08, 2025 (1 week, 2 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 07, 2025 (1 week, 2 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 07, 2025 (1 week, 2 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 07, 2025 (1 week, 2 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 07, 2025 (1 week, 2 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 07, 2025 (1 week, 2 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 07, 2025 (1 week, 3 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 07, 2025 (1 week, 3 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 06, 2025 (1 week, 3 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 06, 2025 (1 week, 3 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 06, 2025 (1 week, 3 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 06, 2025 (1 week, 4 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 06, 2025 (1 week, 4 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 06, 2025 (1 week, 4 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 05, 2025 (1 week, 4 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 05, 2025 (1 week, 4 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 05, 2025 (1 week, 4 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • Cyber Security News
“IngressNightmare” Critical RCE Vulnerabilities in Kubernetes NGINX Clusters Let Attackers Gain Full Control

A recently discovered set of vulnerabilities, dubbed “IngressNightmare,” found in Ingress NGINX Controller, exposing clusters to unauthenticated remote code execution (RCE). Kubernetes dominates conta ... Read more

Published Date: Apr 05, 2025 (1 week, 4 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 05, 2025 (1 week, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 05, 2025 (1 week, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • SentinelOne
IngressNightmare | Critical Unauthenticated RCE Vulnerabilities in Kubernetes Ingress NGINX

As more organizations adopt containerization, Kubernetes adoption is at an all-time high. A key component to any Kubernetes cluster is allowing and managing external traffic to the services organizati ... Read more

Published Date: Apr 04, 2025 (1 week, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • SentinelOne
More From Our Main Blog: IngressNightmare | Critical Unauthenticated RCE Vulnerabilities in Kubernetes Ingress NGINX

As more organizations adopt containerization, Kubernetes adoption is at an all-time high. A key component to any Kubernetes cluster is allowing and managing external traffic to the services organizati ... Read more

Published Date: Apr 04, 2025 (1 week, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 04, 2025 (1 week, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 04, 2025 (1 week, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 04, 2025 (1 week, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 04, 2025 (1 week, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 04, 2025 (1 week, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 04, 2025 (1 week, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 04, 2025 (1 week, 6 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 04, 2025 (1 week, 6 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 03, 2025 (1 week, 6 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 03, 2025 (1 week, 6 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 03, 2025 (1 week, 6 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 03, 2025 (1 week, 6 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 03, 2025 (1 week, 6 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 03, 2025 (1 week, 6 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 03, 2025 (2 weeks ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 03, 2025 (2 weeks ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 02, 2025 (2 weeks ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 02, 2025 (2 weeks ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 02, 2025 (2 weeks ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 02, 2025 (2 weeks ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 02, 2025 (2 weeks ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 02, 2025 (2 weeks, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 01, 2025 (2 weeks, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 01, 2025 (2 weeks, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 01, 2025 (2 weeks, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 01, 2025 (2 weeks, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 01, 2025 (2 weeks, 1 day ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Apr 01, 2025 (2 weeks, 2 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • Daily CyberSecurity
KNIME Business Hub Hit by Critical Bugs, Including Hard-Coded Password and XSS Flaws

A recent security advisory from KNIME details several vulnerabilities affecting the KNIME Business Hub, a customer-managed KNIME Hub instance that provides access to Hub resources and allows for custo ... Read more

Published Date: Apr 01, 2025 (2 weeks, 2 days ago)
CVE-2025-3019 CVE-2025-2402 CVE-2025-2787 CVE-2025-1974
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 31, 2025 (2 weeks, 2 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 31, 2025 (2 weeks, 2 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 31, 2025 (2 weeks, 2 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • The Hacker News
⚡ Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and More

Threat Intelligence / Cybersecurity Every week, someone somewhere slips up—and threat actors slip in. A misconfigured setting, an overlooked vulnerability, or a too-convenient cloud tool becomes the p ... Read more

Published Date: Mar 31, 2025 (2 weeks, 2 days ago)
CVE-2025-2294 CVE-2025-30232 CVE-2025-2857 CVE-2025-20229 CVE-2025-2825 CVE-2025-2783 CVE-2025-22230 CVE-2025-1974 CVE-2025-26512 CVE-2025-2476 ...+11 more CVE
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 31, 2025 (2 weeks, 2 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 31, 2025 (2 weeks, 3 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 30, 2025 (2 weeks, 3 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 30, 2025 (2 weeks, 3 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 30, 2025 (2 weeks, 3 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 29, 2025 (2 weeks, 4 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 29, 2025 (2 weeks, 4 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 29, 2025 (2 weeks, 4 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 29, 2025 (2 weeks, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 29, 2025 (2 weeks, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 28, 2025 (2 weeks, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • CrowdStrike.com
Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ... Read more

Published Date: Mar 28, 2025 (2 weeks, 5 days ago)
CVE-2025-24514 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097
  • Cyber Security News
PoC Exploit Released for Ingress-NGINX Remote Code Execution Vulnerabilities

A proof-of-concept (PoC) exploit for a critical remote code execution vulnerability in Kubernetes Ingress-NGINX controllers, tracked as CVE-2025-1974. The vulnerability uncovered by WiZ affects the va ... Read more

Published Date: Mar 27, 2025 (2 weeks, 6 days ago)
CVE-2025-1974
  • The Cyber Express
Multiple CVEs Found in Ingress-NGINX—Patch Now to Prevent Cluster Compromise

A set of vulnerabilities have been identified in Ingress-NGINX Controller for Kubernetes, posing a risk to organizations relying on the affected versions. These vulnerabilities impact versions prior t ... Read more

Published Date: Mar 27, 2025 (2 weeks, 6 days ago)
CVE-2025-2783 CVE-2025-24514 CVE-2025-24513 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097 CVE-2025-26512
  • Cyber Security News
CodeQLEAKED – GitHub Supply Chain Attack Allows Code Execution Using CodeQL Repositories

A significant vulnerability in GitHub’s CodeQL actions could have permitted attackers to execute malicious code across hundreds of thousands of repositories. The vulnerability, assigned CVE-2025-24362 ... Read more

Published Date: Mar 27, 2025 (2 weeks, 6 days ago)
CVE-2025-1974 CVE-2025-24362
  • Cybersecurity News
Researcher Drops PoC for 9.8 CVSS Ingress-NGINX CVE-2025-1974 Flaw in Kubernetes

A series of critical security vulnerabilities has been discovered in the Ingress-NGINX Controller for Kubernetes, posing a significant risk to Kubernetes deployments. Security researcher Jacob Sandum ... Read more

Published Date: Mar 27, 2025 (3 weeks ago)
CVE-2025-24514 CVE-2025-24513 CVE-2025-1974 CVE-2025-1098 CVE-2025-1097 CVE-2024-7646

The following table lists the changes that have been made to the CVE-2025-1974 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by [email protected]

    Mar. 25, 2025

    Action Type Old Value New Value
    Added Description A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
    Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Added CWE CWE-653
    Added Reference https://https://github.com/kubernetes/kubernetes/issues/131009
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-1974 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-1974 weaknesses.

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: