(AGENPARL) - Roma, 20 Marzo 2026 -

<article data-history-node-id="7423" about="/en/alerts-advisories/kubernetes-security-advisory-av26-260" class="cccs-threats full clearfix">

<div class="content">
<div class="layout layout–onecol">
<div class="layout__region layout__region–content">

<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">

</div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">

<div class="field field–name-body field–type-text-with-summary field–label-hidden field–item"><p><strong>Serial number: </strong>AV26-260<br /><strong>Date: </strong>March 19, 2026</p>

<p>On March 19, 2026, Kubernetes published a security advisory to address a vulnerability in the following product:</p>

<ul><li>Kubernetes ingress-nginx – versions prior to 1.13.9</li>
<li>Kubernetes ingress-nginx — versions prior to 1.14.5</li>
<li>Kubernetes ingress-nginx – versions prior to 1.15.1</li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.</p>

<ul class="list-unstyled"><li><a href="https://discuss.kubernetes.io/t/security-advisory-cve-2026-4342-ingress-nginx-comment-based-nginx-configuration-injection/34349">[Security Advisory] CVE-2026-4342: ingress-nginx comment-based nginx configuration injection</a></li>
<li><a href="https://discuss.kubernetes.io/c/announcements/5">Kubernetes – Announcements</a></li>
</ul></div>

</div>

</div>
</div>

</div>

</article>

(AGENPARL)

(AGENPARL)