#ingressnightmare — Public Fediverse posts

#IngressNightmare – czyli jak przejąć klaster Kubernetes

Podatności określane jako krytyczne mogą wzbudzać skrajne emocje. W sekuraku jesteśmy pewni, że nie wszyscy zgodzą się z punktacją CVSS 3.1 (9.8/10) przypisaną do serii podatności określonych jako IngressNightmare, które zostały opisane 24.04.2025 przez badaczy z wiz.io. TLDR: Problematycznym komponentem jest Ingress NGINX Controller, czyli ingress controller (kontroler ruchu wejściowego,...

#WBiegu #Ingress #K8s #Kubernetes #Nginx #Podatność #Rce

https://sekurak.pl/ingressnightmare-czyli-jak-przejac-klaster-kubernetes/

Discover how Kubewarden can protect you from the critical #IngressNightmare vulnerability (CVE-2025-1974): https://www.kubewarden.io/blog/2025/04/ingress-nginx-cve-2025-1974/

[related]
⬇️
4,500 clusters still exposed to potential pre-auth RCE and working exploit available
👇
https://www.thestack.technology/the-one-with-ross-and-the-horrifying-kubernetes-vulnerability/

[PoC]
⬇️
"Exploit for Ingress NGINX - IngressNightmare"
👇
https://github.com/hakaioffsec/IngressNightmare-PoC

#CyberVeille
#Kubernetes
#IngressNightmare
#CVE_2025_1974

Quite some #IngressNightmare #CVE-2025-1974 PoCs on GitHub now that look good at a cursory review:

https://github.com/hakaioffsec/IngressNightmare-PoC

https://github.com/yoshino-s/CVE-2025-1974/

https://github.com/Esonhugh/ingressNightmare-CVE-2025-1974-exps/

https://github.com/hi-unc1e/CVE-2025-1974-poc/

https://github.com/lufeirider/IngressNightmare-PoC

https://github.com/zwxxb/CVE-2025-1974

https://github.com/rjhaikal/POC-IngressNightmare-CVE-2025-1974

Quick note on exploits trying to use `nginx.ingress.kubernetes.io/server-snippet`: That annotation has been identified as an issue before and has been disabled to mitigate CVE-2021-25742.

'... series of unauthenticated ... [RCE] vulnerabilities in Ingress NGINX Controller for Kubernetes dubbed #IngressNightmare ...

'... about 43% of cloud environments are vulnerable to these vulnerabilities, with our research uncovering over 6,500 clusters, including Fortune 500 companies, that publicly expose vulnerable Kubernetes ingress controllers’ admission controllers to the public internet ...

'Using Ingress-NGINX is one of the most common methods for exposing Kubernetes applications externally.

'Our research show that over 41% of internet-facing clusters are running Ingress-NGINX'.
https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities

This Week in Security: IngressNightmare, NextJS, and Leaking DNA - This week, researchers from Wiz Research released a series of vulnerabilities in t... - https://hackaday.com/2025/03/28/this-week-in-security-ingressnightmare-nextjs-and-leaking-dna/ #thisweekinsecurity #ingressnightmare #hackadaycolumns #securityhacks #23andme #nextjs #news

I wrote up some details on exploiting #IngressNightmare #CVE-2025-1974:
www.averlon.ai/blog/kuberne...

Where are we at with releasing a full PoC?

This week a critical security vulnerability in #Kubernetes, dubbed "#IngressNightmare", was published.

As we are using #Rancher managed Kubernetes clusters ourselves, we share our analysis in our latest #blog post.

How Rancher RKE clusters are affected, how the #vulnerability can be mitigated and when a fix can be expected.

https://www.infiniroot.com/blog/1478/kubernetes-vulnerability-ingressnightmare-rancher-clusters-affected

CVE-2025-1974: Critical Set of Vulnerabilities in Ingress NGINX Controller for Kubernetes Leading to Unauthenticated RCE – Source: socprime.com https://ciso2ciso.com/cve-2025-1974-critical-set-of-vulnerabilities-in-ingress-nginx-controller-for-kubernetes-leading-to-unauthenticated-rce-source-socprime-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #IngressNightmare #CVE-2025-1974 #Latestthreats #Vulnerability #socprimecom #socprime #Blog #CVE

Attention all k8s people: There's an #IngressNightmare in progress.
> "Based on our analysis, about 43% of cloud environments are vulnerable to these vulnerabilities, with our research uncovering over 6,500 clusters, including Fortune 500 companies, that publicly expose vulnerable Kubernetes ingress controllers’ admission controllers to the public internet—putting them at immediate critical risk."
https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities

Why VSHN Managed OpenShift Customers Are Safe from the Recent Ingress NGINX Vulnerability. Read our blog post: https://buff.ly/Z0qXYP6 #IngressNightmare #NGINX #Kubernetes #Ingress #IngressNGINXController #OpenShift #ManagedOpenShift

IngressNightmare: Four Critical Bugs Found in 40% of Cloud Systems – Source: www.infosecurity-magazine.com https://ciso2ciso.com/ingressnightmare-four-critical-bugs-found-in-40-of-cloud-systems-source-www-infosecurity-magazine-com/ #rssfeedpostgeneratorecho #InfoSecurityMagazine #InfosecurityMagazine #CyberSecurityNews #IngressNightmare

#NGINX Critical Ingress NGINX Controller for #Kubernetes Vulnerability Allows #RCE Without Authentication. A set of 5 critical security CVE with CVSS scores 4.8-9.8 affecting ~43% of cloud environments globally:

#IngressNightmare

https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html

Oof. Patch time, folks! https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities #kubernetes #ingressnightmare

🎙️ All you need to know on our latest discovery #IngressNightmare 🚨

In this episode of Crying Out Cloud, Amitai Cohen & Eden Naftali are joined by Nir Ohfeld — Head of Vulnerability Research at Wiz.

Nir and his team have uncovered some of the most impactful vulnerabilities affecting cloud and SaaS applications. In this episode, he's diving into the latest discovery, a critical vulnerability in Ingress-NGINX:

• How the team uncovered a critical unauthenticated RCE in #NGINX Ingress Controller
• Why Kubernetes admission controllers might be the next big attack surface
• The wild journey of hunting vulnerabilities in the cloud

🔗 Listen now:

🍏 https://podcasts.apple.com/us/podcast/ingress-nightmare-how-a-single-request-could-take/id1675289400?i=1000700768501
🎧 https://open.spotify.com/episode/0G1MmleXvyTjb0wF517kaf?si=yg1nG_NdRbKur-1QjmWbpQ
📺 https://www.youtube.com/watch?v=mjwLEbGA4mk&ab_channel=Wiz

#IngressNightmare: Wiz Research uncovers a critical vulnerability in Ingress-NGINX 🚨

Wiz Research found a novel attack vector in one of Kubernetes's most fundamental projects, Ingress-NGINX, which is rated CVSS 9.8.

Why does this matter?
Ingress-NGINX is found in over 40% of cloud environments. If you're using this project, your infrastructure could be at risk.

🔑 What's at risk?
This vulnerability allows attackers to gain access to all secrets across all namespaces in a Kubernetes cluster — essentially enabling a cluster takeover.

🔒 What should you do?
A patch is available.
Upgrade to version v1.12.1, v1.11.5 to protect your environment.

Wiz research has worked closely with the Kubernetes maintainers over the last couple of months to mitigate this attack surface fully

📝 For full technical details and a remediation guide, check out our blog:

🚨 Breaking News: #Kubernetes users rejoice as *IngressNightmare* becomes the hottest new way to turn your #cloud environment into a hacker's paradise! Who needs #security when you can have "complete cluster takeover" as a feature? 🎉 Just a casual reminder that your #secrets are their secrets now. 🙈🔓
https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities #IngressNightmare #breach #hacker #news #HackerNews #ngated

IngressNightmare Flaws Expose Many Kubernetes Clusters to Remote Hacking – Source: www.securityweek.com https://ciso2ciso.com/ingressnightmare-flaws-expose-many-kubernetes-clusters-to-remote-hacking-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #IngressNightmare #vulnerabilities #securityweekcom #CloudSecurity #securityweek #Kubernetes #FEATURED

IngressNightmare Flaws Expose Many Kubernetes Clusters to Remote Hacking https://www.securityweek.com/ingressnightmare-flaws-expose-many-kubernetes-clusters-to-remote-hacking/ #IngressNightmare #vulnerabilities #CloudSecurity #cloudsecurity #Kubernetes #Featured

IngressNightmare Flaws Expose Many Kubernetes Clusters to Remote Hacking https://www.securityweek.com/ingressnightmare-flaws-expose-many-kubernetes-clusters-to-remote-hacking/ #IngressNightmare #vulnerabilities #CloudSecurity #cloudsecurity #Kubernetes #Featured