Kubernetes security advisory (AV26-208)

Serial number: AV26-208
Date: March 10, 2026

On March 9, 2026, Kubernetes published a security advisory to address a vulnerability in the following products:

• Kubernetes ingress-nginx – versions prior to 1.13.8
• Kubernetes ingress-nginx — versions prior to 1.14.4
• Kubernetes ingress-nginx – versions prior to 1.15.0

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• [Security Advisory] CVE-2026-3288: ingress-nginx rewrite-target nginx configuration injection