Kubernetes Ingress-Nginx Vulnerability Remains Unpatched in Some Production Environments

A high-severity configuration-injection vulnerability, CVE-2026-4342 (CVSS 8.8), continues to affect Kubernetes Ingress-Nginx in production clusters that have not applied a March fix. This issue, along with two path-traversal bugs in Kubernetes' SMB and NFS CSI drivers, poses ongoing security risks. In response, Microsoft Defender for Cloud has enhanced container security with new discovery and posture management for serverless container workloads across Azure and AWS.