Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:nginx:gateway_fabric:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Configuration Injection in NGINX Gateway Fabric via AuthenticationFilter CRD

NGINX Gateway Fabric contains a configuration injection vulnerability in the AuthenticationFilter Custom Resource Definition that allows authenticated attackers to escape directive contexts and manipulate the shared NGINX data-plane configuration.

NGINX Gateway Fabric configuration-injection kubernetes gateway-fabric cve
1t 1c
medium advisory

CVE-2026-66362: Injection Vulnerability in NGINX Gateway Fabric

An injection vulnerability in the NGINX Gateway Fabric configuration generator allows authenticated users to inject arbitrary NGINX directives into the configuration when using NGINX Plus as the data plane.

NGINX Gateway Fabric vulnerability kubernetes ingress injection
1t 1c