Kubernetes security advisory (AV26-260)

Serial number: AV26-260
Date: March 19, 2026

On March 19, 2026, Kubernetes published a security advisory to address a vulnerability in the following product:

• Kubernetes ingress-nginx – versions prior to 1.13.9
• Kubernetes ingress-nginx — versions prior to 1.14.5
• Kubernetes ingress-nginx – versions prior to 1.15.1

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• [Security Advisory] CVE-2026-4342: ingress-nginx comment-based nginx configuration injection
• Kubernetes - Announcements