{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/ingress-nginx/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:kubernetes:ingress_nginx:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":2.7,"id":"CVE-2026-116472"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ingress-nginx"],"_cs_severities":["low"],"_cs_tags":["kubernetes","ingress-nginx","denial-of-service","vulnerability"],"_cs_type":"advisory","_cs_vendors":["Kubernetes"],"content_html":"\u003cp\u003eA security issue was discovered in ingress-nginx. A user with permission to create an Ingress may be able to cause a denial of service of the ingress-nginx data plane or potentially redirect traffic from other Ingresses. Kubernetes will not be issuing a fix for this CVE because ingress-nginx maintenance ended in March 2026.\u003c/p\u003e\n","date_modified":"2026-11-05T20:26:35Z","date_published":"2026-11-05T20:26:35Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ingress-nginx-mirror-target-dos/","summary":"A security issue in ingress-nginx allows users with permission to create an Ingress to cause a denial of service of the ingress-nginx data plane or potentially redirect traffic from other Ingresses. Kubernetes clusters are only affected if using ingress-nginx.","title":"ingress-nginx: Denial of service and traffic redirection (CVE-2026-116472)","url":"https://feed.craftedsignal.io/briefs/2026-11-ingress-nginx-mirror-target-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - Ingress-Nginx","version":"https://jsonfeed.org/version/1.1"}