F5-K000161834: Medium severity F5 NGINX Ingress Controller vulnerability
Published Jul 15, 2026
·Updated
When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission to create or modify Ingress or TransportServer resources can cause the NGINX Ingress Controller process to terminate.
Affected Software
3 affected componentsFixes available
F5 NGINX Ingress Controller>=5.0.0<=5.5.1
5.5.2
F5 NGINX Ingress Controller>=4.0.0<=4.0.1
F5 NGINX Ingress Controller>=3.6.0<=3.7.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.5.2
Event History
Jul 15, 2026
Advisory Published
via F5·01:43 PM
Data Sourced
via F5·01:43 PM
DescriptionSeverityWeaknessAffected Software