CVE-2026-3288

概要

参考情報

• kubernetes/kubernetes · Issue Tracking
• openwall.com/lists/oss-security/2026/03/09/8 · Mailing List
• bvabhishek/CVE-2026-3288-lab · Mitigation

ingress-nginx のその他の脆弱性

• CVE-2023-5044高 8.8Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.
• CVE-2023-5043高 8.8Ingress nginx annotation injection causes arbitrary command execution.
• CVE-2022-4886中 6.5Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.
• CVE-2021-25748中 6.5A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypas…
• CVE-2021-25746高 7.1A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an …