CVE WATCH / VULNERABILITY DETAIL
CVE-2026-104939
HIGHCVSS 7.5NVD feed
Published 14 October 2026 · tracked since 15 October 2026
Description
Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external authenticati
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-107381 MEDIUM 6.5
- CVE-2026-101019 MEDIUM 6.5
- CVE-2026-101025 MEDIUM 5.3
- CVE-2020-37282 CRITICAL 9.8
- CVE-2026-98417
- CVE-2026-98418
- CVE-2026-98419
- CVE-2026-98420
- CVE-2026-98409
- CVE-2026-98410