Skip to content

CVE record · 2 sources

CVE-2026-104939

CVSS 7.5

Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress.

Vendor: F5
Product: NGINX
CVSS: 7.5
EPSS: 0.008 (p58)
Exposure class: Web platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

22

CCCS advisory CCCS 16d ago

F5 security advisory (AV26-1049)

CVE-2026-101019 CVE-2026-104939 CVE-2026-15176 F5
15

CVE NVD 17d ago

Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress.

Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire…

CVSS 7.5 CVE-2026-104939 F5