Exploited vulnerabilitiesBriefPublic record
Ingress-NightMare, Kubernetes ingress-nginx (CVE-2025-1974 plus -1097, -1098, -24514, -24513)
Disclosed 24 Mar 2025 by Wiz. Unauthenticated RCE through the admission controller, which can lead to cluster takeover.
- Disclosed
What happened
- Fixed: 1.12.1 and 1.11.5.
- Scale: Wiz said about 43% of cloud environments were vulnerable and about 6,500 clusters exposed the admission controller publicly.
- Exploited: no confirmed in-the-wild exploitation.
Live scores
Live scores
CVE-2025-1974- EPSS
- 0.994
very likely to be attacked soon - VEDAS
- 0.980
strong exploit evidence - On CISA KEV
- Not listed
Sources
- https://kubernetes.io/blog/2025/03/24/ingress-nginx-cve-2025-1974/
- https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.