CVE-2025-1974 Scanner
CVE-2025-1974 Scanner - Remote Code Execution (RCE) vulnerability in Ingress-Nginx Controller
Used 2.1k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2025-1974
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
Attack Vector
Network
Privileges Req.
None
User Interaction
None
ingress-nginx
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: ingress-nginx
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →