CVE-2025-14727

High · 8.3

CVSS

8.3

EPSS

0.4%

Published

Dec 17, 2025

CISA due date

—

The record

A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-target annotation validation. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected packages

Ecosystem	Package	Introduced	Fixed