Traefik vulnerabilities

Products

• Traefik 86

Newest

• traefik Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak CVE-2026-121966 7.0 HighNovember 4, 2026
• traefik Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Service CVE-2026-119574 8.2 HighOctober 30, 2026
• traefik Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secret CVE-2026-119573 2.1 LowOctober 30, 2026
• traefik Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider CVE-2026-119572 7.0 HighOctober 30, 2026
• traefik Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher CVE-2026-114656 6.9 MediumOctober 22, 2026
• traefik Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper CVE-2026-114642 7.0 HighOctober 22, 2026
• traefik Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper CVE-2026-114641 6.3 MediumOctober 22, 2026
• traefik Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router CVE-2026-114640 7.0 HighOctober 22, 2026
• traefik Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool CVE-2026-114639 7.0 HighOctober 22, 2026
• traefik Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision CVE-2026-114638 7.0 HighOctober 22, 2026
• traefik Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak CVE-2026-114637 7.0 HighOctober 22, 2026
• traefik Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router CVE-2026-114636 7.0 HighOctober 22, 2026
• traefik Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme CVE-2026-114635 7.0 HighOctober 22, 2026
• traefik Traefik before 2.11.46, 3.6.17, and 3.7.1 Cross-Namespace Resource Reference via Kubernetes Annotations CVE-2026-112778 6.4 MediumOctober 19, 2026
• traefik Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle CVE-2026-88010 Fix available 6.3 MediumSeptember 22, 2026
• traefik Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging CVE-2026-88009 Public exploitFix available 8.8 HighSeptember 10, 2026
• traefik Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization CVE-2026-88008 Public exploitFix available 7.0 HighSeptember 10, 2026
• traefik Traefik HTTP/3 Backend NTLM Connection Reuse CVE-2026-88007 Fix available 9.1 CriticalSeptember 10, 2026
• traefik Traefik entrypoint header-name sanitization bypassed via request trailers CVE-2026-88004 Fix available 7.0 HighSeptember 10, 2026
• traefik Traefik: ForwardAuth identity spoofing via dot-form header alias CVE-2026-88011 Fix available 5.3 MediumSeptember 10, 2026
• traefik Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded CVE-2026-88012 Fix available 5.3 MediumSeptember 10, 2026
• traefik Traefik before v2.11.56 Identity Spoofing via Header Alias CVE-2026-88879 5.3 MediumSeptember 10, 2026
• traefik Traefik v2.8.2 through v3.6 HTTP/3 Timeout Bypass CVE-2026-88878 6.9 MediumSeptember 10, 2026
• traefik Traefik v3.7.0 Authentication Bypass via from-to-www-redirect CVE-2026-88877 Public exploit 9.3 CriticalSeptember 10, 2026
• traefik Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict CVE-2026-85597 8.2 HighSeptember 4, 2026
• traefik Traefik v3.7 Authentication Bypass via TLS Option Conflict CVE-2026-85596 8.2 HighSeptember 4, 2026
• traefik Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth CVE-2026-85595 Public exploit 9.3 CriticalSeptember 4, 2026
• traefik Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middleware CVE-2026-85594 7.0 HighSeptember 4, 2026
• traefik Traefik: Gateway API route identity collision allows cross-namespace backend hijacking CVE-2026-71327 Fix available 7.6 HighAugust 6, 2026
• traefik Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing CVE-2026-71326 Fix available 2.1 LowAugust 6, 2026
• traefik Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef CVE-2026-71325 Fix available 4.8 MediumAugust 6, 2026
• traefik Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool CVE-2026-71324 Fix available 7.0 HighAugust 6, 2026
• traefik Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass CVE-2026-67309 Fix available 7.8 HighAugust 1, 2026
• traefik Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass CVE-2026-65602 Fix available 5.3 MediumJuly 22, 2026
• traefik Traefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionRef CVE-2026-65601 Fix available 5.3 MediumJuly 22, 2026
• traefik Traefik before v2.11.52 Authentication Bypass via ReplacePathRegex CVE-2026-65600 Fix available 7.8 HighJuly 22, 2026
• traefik Traefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth CVE-2026-54763 Fix available 7.8 HighJuly 6, 2026
• traefik Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port CVE-2026-54765 Fix available 6.3 MediumJuly 6, 2026
• traefik ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false CVE-2026-54764 Fix available 6.9 MediumJuly 6, 2026
• traefik Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails CVE-2026-54762 Fix available 5.9 MediumJune 19, 2026
• traefik Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services CVE-2026-54761 Public exploitFix available 6.0 MediumJune 17, 2026
• traefik, red hat openshift dev spaces 3.30 +1 more Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts CVE-2026-53622 Fix available 7.8 HighJune 16, 2026
• traefik, red hat openshift dev spaces 3.30 +1 more Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass CVE-2026-48491 Fix available 7.8 HighJune 16, 2026
• traefik, red hat openshift dev spaces 3.30 +1 more Traefik StripPrefix Route-Level Auth Bypass via Path Normalization CVE-2026-48020 Fix available 7.8 HighJune 11, 2026
• traefik, red hat openshift dev spaces 3.29, openshift gitops +2 more Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false CVE-2026-44774 Fix available 6.4 MediumMay 13, 2026
• traefik Traefik: Errors middleware forwards Authorization and Cookie headers to separate error page service CVE-2026-41181 Fix available 6.9 MediumMay 4, 2026
• traefik Traefik: BasicAuth middleware: timing side-channel vulnerability CVE-2026-41263 Fix available 6.3 MediumApril 24, 2026
• traefik Traefik Kubernetes CRD allows unauthorized cross-namespace middleware binding CVE-2026-41174 Fix available 4.8 MediumApril 24, 2026
• traefik, red hat openshift dev spaces 3.28 +1 more Traefik: StripPrefixRegex auth bypass via Path/RawPath desync CVE-2026-40912 Fix available 7.8 HighApril 24, 2026
• traefik, red hat openshift dev spaces 3.28 +1 more Traefik: Forwarded alias spoofing top pre-auth decision bypass CVE-2026-39858 Fix available 7.8 HighApril 24, 2026
• Show olderLoading…