Date: 2025-03-27
Overview
A recent security vulnerability (named as #IngressNightmare) with the following CVEs:
- CVE-2025-1974
- CVE-2025-1098
- CVE-2025-1097
- CVE-2025-24514
- CVE-2025-24513
has been identified in Kubernetes based Nginx Ingress Controller. This vulnerability may allow unauthorized access, privilege escalation under specific configurations.
Impact on Cumulocity Platform
None.
We confirm that the Cumulocity platform is not affected by this vulnerability because we don’t use the Kubernetes based Nginx Ingress Controller in our platform.
Recommended Actions for Customers
None
References
For any further questions, please contact support.