PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← Back | CVE Intelligence Hub

CVE-2025-1974

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2025-1974.

Coverage Span
2025-03-26
Reports
1 related reports

Associated Reports & Timeline

1.
IngressNightmare: Unauth RCE in Ingress NGINX (CVE-2025-1974)
projectdiscovery.io | vulnerability | | Original ↗ | .md | #bug-bounty | #rce
A critical vulnerability (CVE-2025-1974) was recently discovered in the Kubernetes Ingress-NGINX Controller that allows unauthenticated remote code execution (RCE) on the ingress controller pod. Originally discovered by the Wiz research team (Nir Ohfeld, Ronen Shustin, Sagi Tzadik, Hillai Ben-Sasson) in late 2024 and disclosed in March 2025, CVE-2025-1974 is part of a series of vulnerabilities collectively called IngressNightmare. If you’re specifically looking to use the IngressNightmare dete