PT-2026-5763 · Kubernetes+1 · Ingress-Nginx+1

Matan Shabtay · Published 2026-02-02 · Updated 2026-03-11 · CVE-2026-24514

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ingress-nginx (affected versions not specified)

Description A denial of service condition exists in the validating admission controller feature. Sending large requests to the validating admission controller can lead to excessive memory consumption, potentially causing the ingress-nginx controller pod to be terminated or the node to run out of memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2026-03606

BIT-NGINX-INGRESS-CONTROLLER-2026-24514

CVE-2026-24514

GHSA-2PF9-VR92-6H3V

GO-2026-4417

SUSE-SU-2026:0403-1

Affected Products

Red Os

Ingress-Nginx

References · 99

• https://nvd.nist.gov/vuln/detail/CVE-2026-24514 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0403-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-nginx-ingress-controller-2026-24514 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-24514 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2pf9-vr92-6h3v · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03606 · Security Note
• https://osv.dev/vulnerability/GO-2026-4417 · Vendor Advisory
• https://github.com/kubernetes/kubernetes/issues/136680 · Note
• https://github.com/kubernetes/ingress-nginx · Note
• https://suse.com/security/cve/CVE-2026-22808 · Note
• https://suse.com/security/cve/CVE-2025-69199 · Note
• https://suse.com/security/cve/CVE-2026-23847 · Note
• https://suse.com/security/cve/CVE-2026-25121 · Note
• https://suse.com/security/cve/CVE-2025-70849 · Note
• https://suse.com/security/cve/CVE-2026-23851 · Note