CVE-2021-25742

score

<0.1

cvss

7.6

epss

2.1%

published

2021-10-29

kev added

—

first seen

2026-10-21

ingress-nginx contains a security issue where a user with permissions to create or update ingress objects can exploit the custom snippets feature to access all secrets in the cluster, exploit requires user to have ingress object permissions.