{"uuid": "bda3234e-c713-42cd-b4d4-e45645a5240c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1974", "type": "seen", "source": "https://t.me/kubernative/181", "content": "Don\u2019t miss the news regarding five recent critical vulnerabilities in ingress-nginx, including CVE-2025-1974 scored at 9.8 CVSS!\n\nThe Kubernetes blog post states that over 40% of Kubernetes administrators rely on ingress-nginx and should take action immediately. Otherwise, a malicious user with no credentials can take over your Kubernetes cluster by exploiting configuration injection vulnerabilities via the Validating Admission Controller.\n\nThe latest ingress-nginx releases, v1.12.1 and v1.11.5, are already available with all five vulnerabilities fixed.\n\nFind more details in this post from the Kubernetes Security Response Committee and this detailed article from Wiz.\n\n#news #security", "creation_timestamp": "2026-08-29T18:00:03.875392Z"}