Critical Unauthenticated Remote Code Execution Vulnerabilities inIngress NGINX

Wiz Research disclosed multiple critical unauthenticated RCE vulnerabilities in the Ingress NGINX Controller ("IngressNightmare") that permit arbitrary command execution via unsanitized ingress annotations and the admission controller, potentially exposing cluster-wide secrets and enabling full Kubernetes cluster compromise; immediate mitigation recommended includes upgrading affected controllers (prior to 1.12.1 and 1.11.5), restricting admission webhook access, and increased monitoring.