CVE-2026-24514 — ingress-nginx Admission Controller denial of service

CVE-2026-24514

ingress-nginx Admission Controller denial of service PUBLISHED

Description (CNA)

A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx controller pod being killed or the node running out of memory.

Affected (CNA)

Vendor / product	Versions
Kubernetes / ingress-nginx	affected 0 before 1.13.7; affected 0 before 1.14.3

CWE

CWE-770

References

https://github.com/kubernetes/kubernetes/issues/136680

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.