#kubernetes

ingress-nginx CVE-2026-116472: No Patch, Block mirror-target

One ingress-nginx annotation can drop all traffic through the controller, and no upstream fix is coming. Block mirror-target with a ValidatingAdmissionPolicy.

#kubernetes#security#ingress-nginx#admission-control7 min read