CVE-2026-24514
MEDIUMingress-nginx < 1.13.7 and < 1.14.3 - Denial of Service via Validating Admission Controller
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2026-24514. PoCs published by XiaomingX, mbanyamer.
AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2026-24514, which targets a memory exhaustion vulnerability in the ingress-nginx validating admission webhook. The exploit sends oversized AdmissionReview requests to trigger excessive memory allocation, potentially causing OOMKill of controller pods.
Description
A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx controller pod being killed or the node running out of memory.
Exploits (2)
This repository contains a functional Python exploit for CVE-2026-24514, which targets a memory exhaustion vulnerability in the ingress-nginx validating admission webhook. The exploit sends oversized AdmissionReview requests to trigger excessive memory allocation, potentially causing OOMKill of controller pods.
This repository contains a functional Python exploit for CVE-2026-24514, which targets a memory exhaustion vulnerability in the ingress-nginx validating admission webhook. The exploit sends oversized AdmissionReview requests to trigger excessive memory allocation, potentially causing OOMKill of controller pods.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H