{"id":"CVE-2026-15228","summary":"Kong Kubernetes Ingress Controller cluster-wide ingress configuration DoS via CA-certificate ID collision","details":"Kong Kubernetes Ingress Controller (KIC) allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. KIC collects CA-certificate Secrets across all watched namespaces using a label selector alone, without ingress-class or namespace restrictions. The CA-certificate primary key is derived from a user-supplied field in the Secret. Duplicate CA-certificate IDs cause Kong Gateway to reject the entire configuration document and halting all ingress changes cluster-wide.","aliases":["GHSA-g9h6-h2xj-mf78"],"modified":"2026-08-12T03:51:23.618432330Z","published":"2026-07-29T15:28:30.362Z","database_specific":{"cna_assigner":"Kong","cwe_ids":["CWE-400","CWE-862"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15228.json"},"references":[{"type":"WEB","url":"https://github.com"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15228.json"},{"type":"ADVISORY","url":"https://github.com/Kong/kubernetes-ingress-controller/security/advisories/GHSA-g9h6-h2xj-mf78"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15228"},{"type":"PACKAGE","url":"https://github.com/Kong/kubernetes-ingress-controller"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kong/kubernetes-ingress-controller","events":[{"introduced":"92a6761ac1c94ecd202571cbf84de860336664f3"},{"fixed":"9013594b6d9578b9d16ac354f4df9f2080623ff4"},{"introduced":"db9d02434d9f3ef3bd8d16423e5a0f3983eb1fca"},{"fixed":"7fb3d184d29a489e5058073aacee7e7dba0b98a1"}],"database_specific":{"extracted_events":[{"introduced":"3.4.0"},{"fixed":"3.4.18"},{"introduced":"3.5.0"},{"fixed":"3.5.11"}],"source":"AFFECTED_FIELD"}}],"versions":["v3.5.10","v3.4.17","v3.5.9","v3.4.16","v3.5.8","v3.4.15","v3.5.7","v3.4.14","v3.4.13","v3.5.6","v3.4.12","v3.5.5","v3.5.4","v3.4.11","v3.4.10","v3.5.3","v3.4.9","v3.5.2","v3.4.8","v3.5.1","v3.5.0","v3.4.7","v3.4.6","v3.4.5","v3.4.4","v3.4.3","v3.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-15228.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}