Vulnerability Research
Kubernetes Ingress-NGINX Remote Code Execution (CVE-2025-1974)
CVE-2025-1974 allows unauthenticated remote code execution in Kubernetes Ingress-NGINX by abusing unsanitized annotations. Dive deep into the vulnerability mechanics, proof-of-concept, real-world applicability, and mitigations.