By weakness (CWE)

CWE-76: related vulnerabilities

CVEs classified under CWE-76. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-11311HIGH 8.1

  NGINX Gateway Fabric contains a configuration injection vulnerability that allows authenticated users with permission to create or modify certain Kubernetes Custom Resources to inject malicious NGINX directives. By crafting specially-formatted values in the serverTokens field (NginxProxy resource) or extraAuthArgs field (AuthenticationFilter resource), an attacker can insert arbitrary configuration that alters how NGINX processes requests. The vulnerability requires valid cluster credentials and appropriate RBAC permissions to exploit, making it a control-plane risk rather than a direct data-plane exposure.