INGRESSNIGHTMARE: 9.8 CRITICAL UNAUTHENTICATED REMOTE CODE EXECUTION VULNERABILITIES IN INGRESS NGINX

Summary from the TLDR Web Dev newsletter

IngressNightmare is a series of critical, unauthenticated remote code execution (RCE) vulnerabilities in Ingress NGINX Controller for Kubernetes that affects over 40% of cloud environments - it potentially leads to complete cluster takeovers by allowing attackers to access all cluster secrets.