Traefik Traefik

• CVE-2026-121966 High 8.7 Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak 0.3%
• CVE-2026-119574 Medium 5.9 Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Service 0.3%
• CVE-2026-119573 Medium 4.4 Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secret 0.3%
• CVE-2026-119572 High 8.7 Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider 0.2%
• CVE-2026-114656 High 7.5 Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher 0.2%
• CVE-2026-114642 High 8.7 Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper 0.2%
• CVE-2026-114641 Low 3.7 Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper 0.3%
• CVE-2026-114640 High 8.7 Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router 0.2%
• CVE-2026-114639 High 8.7 Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool 0.3%
• CVE-2026-114638 High 8.7 Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision 0.2%
• CVE-2026-114637 High 8.7 Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak 0.3%
• CVE-2026-114636 High 8.7 Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router 0.2%
• CVE-2026-114635 High 8.7 Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme 0.2%
• CVE-2026-112778 Medium 6.4 Traefik before 2.11.46, 3.6.17, and 3.7.1 Cross-Namespace Resource Reference via Kubernetes Annotations 0.2%
• CVE-2026-88010 Medium 6.3 Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle 0.3%
• CVE-2026-88012 Medium 5.3 Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded 0.5%
• CVE-2026-88011 Medium 5.3 Traefik: ForwardAuth identity spoofing via dot-form header alias 0.4%
• CVE-2026-88009 High 8.8 Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging 0.4%
• CVE-2026-88008 High 7.0 Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization 0.5%
• CVE-2026-88007 Critical 9.1 Traefik HTTP/3 Backend NTLM Connection Reuse 0.6%
• CVE-2026-88004 High 7.0 Traefik entrypoint header-name sanitization bypassed via request trailers 0.5%
• CVE-2026-88879 Medium 5.3 Traefik before v2.11.56 Identity Spoofing via Header Alias 0.3%
• CVE-2026-88878 Medium 5.3 Traefik v2.8.2 through v3.6 HTTP/3 Timeout Bypass 0.4%
• CVE-2026-88877 Critical 9.8 Traefik v3.7.0 Authentication Bypass via from-to-www-redirect 0.6%
• CVE-2026-85597 High 8.2 Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict 0.4%
• CVE-2026-85596 High 8.2 Traefik v3.7 Authentication Bypass via TLS Option Conflict 0.4%
• CVE-2026-85595 Critical 9.3 Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth 2.5%
• CVE-2026-85594 High 7.0 Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middleware 0.5%
• CVE-2026-71327 High 7.6 Traefik: Gateway API route identity collision allows cross-namespace backend hijacking 0.5%
• CVE-2026-71326 Low 2.1 Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing 0.3%
• CVE-2026-71325 Medium 4.8 Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef 0.2%
• CVE-2026-71324 High 7.0 Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool 1.1%
• CVE-2026-67309 High 7.8 Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass 0.7%
• CVE-2026-65602 Medium 5.3 Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass 0.3%
• CVE-2026-65601 Medium 5.3 Traefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionRef 0.5%
• CVE-2026-65600 High 7.8 Traefik before v2.11.52 Authentication Bypass via ReplacePathRegex 0.6%
• CVE-2026-54763 High 7.8 Traefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth 0.2%
• CVE-2026-54765 Medium 6.3 Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port 0.3%
• CVE-2026-54764 Medium 6.9 ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false 0.3%
• CVE-2026-54762 Medium 5.9 Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails 0.4%
• CVE-2026-54761 Medium 6.0 Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services 0.4%
• CVE-2026-53622 Critical 9.1 Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts 0.6%
• CVE-2026-48491 Critical 9.1 Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass 0.4%
• CVE-2026-48020 Critical 9.1 Traefik StripPrefix Route-Level Auth Bypass via Path Normalization 0.8%
• CVE-2023-54365 High 7.5 Traefik - Denial of Service via HTTP/2 Request Handling 0.8%
• CVE-2026-44774 High 8.3 Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false 0.5%
• CVE-2026-41181 Medium 6.9 Traefik: Errors middleware forwards Authorization and Cookie headers to separate error page service 0.4%
• CVE-2026-41263 Medium 6.3 Traefik: BasicAuth middleware: timing side-channel vulnerability 0.4%
• CVE-2026-40912 High 8.6 Traefik: StripPrefixRegex auth bypass via Path/RawPath desync 0.8%
• CVE-2026-39858 High 8.2 Traefik: Forwarded alias spoofing top pre-auth decision bypass 0.5%