TR
Product
traefik
81
CVEs
0
On KEV
10.0
Max CVSS
10
New 30D
Severity mix
Critical 18High 40Medium 19Low 4
Watch
Add traefik to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54763 | 10.0 | Jul 6 | Traefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth Affected: < 2.11.51; >= 3.0.0-beta1, < 3.6.22; >= 3.7.0-ea.1, < 3.7.6 |
| CVE-2026-53622 | 10.0 | Jun 23 | Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts Affected: >= 3.7.0, < 3.7.3; >= 3.0.0, < 3.6.18; < 2.11.51 |
| CVE-2026-48491 | 10.0 | Jun 23 | Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass Affected: >= 3.7.0, < 3.7.3 |
| CVE-2026-48020 | 10.0 | Jun 23 | Traefik StripPrefix Route-Level Auth Bypass via Path Normalization Affected: >= 3.7.0-ea.1, < 3.7.3; >= 3.0.0-beta1, < 3.6.19; < 2.11.48 |
| CVE-2026-39858 | 10.0 | Apr 30 | Traefik: Forwarded alias spoofing top pre-auth decision bypass Affected: < 2.11.43; >= 3.0.0-beta1, < 3.6.14; >= 3.7.0-ea.1, < 3.7.0-rc.2 |
| CVE-2026-35051 | 10.0 | Apr 30 | Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth Affected: < 2.11.43; >= 3.0.0-beta1, < 3.6.14; >= 3.7.0-ea.1, < 3.7.0-rc.2 |
| CVE-2026-44774 | 9.9 | May 15 | Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false Affected: < 2.11.46; >= 3.0.0-beta1, < 3.6.17; >= 3.7.0-rc.0, < 3.7.1 |
| CVE-2026-88877 | 9.8 | Sep 10 | Traefik v3.7.0 Authentication Bypass via from-to-www-redirect Affected: 3.7.0 through 3.7.13 |
| CVE-2026-85596 | 9.8 | Sep 4 | Traefik v3.7 Authentication Bypass via TLS Option Conflict Affected: 3.7.0 through 3.7.10 |
| CVE-2026-85595 | 9.8 | Sep 4 | Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth Affected: before 2.11.55; 3.0.0 through 3.7.10 |
| CVE-2026-85594 | 9.8 | Sep 4 | Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middleware Affected: 3.7.1 through 3.7.12 |
| CVE-2025-54386 | 9.8 | Aug 2 | Traefik is an HTTP reverse proxy and load balancer Affected: before 2.11.7; 3.0.0 before 3.4.4; 3.5.0; 3.5.0; 3.5.0 |
| CVE-2026-88008 | 9.1 | Sep 10 | Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization Affected: >= 2.11.26, < 2.11.57; >= 3.4.2, < 3.7.13 |
| CVE-2026-88007 | 9.1 | Sep 10 | Traefik HTTP/3 Backend NTLM Connection Reuse Affected: >= 2.11.0, < 2.11.57; >= 3.0.0, < 3.7.13 |
| CVE-2026-85597 | 9.1 | Sep 4 | Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict Affected: before 2.11.55; 3.0.0 through 3.7.10 |
| CVE-2026-71324 | 9.1 | Aug 6 | Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool Affected: < 2.11.53; >= 3.0.0, < 3.6.24; >= 3.7.0, < 3.7.9 |
| CVE-2025-47952 | 9.1 | May 30 | Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer Affected: before 2.11.25; 3.0.0 before 3.4.1 |
| CVE-2025-32431 | 9.1 | Apr 21 | Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer Affected: before 2.11.24; 3.0.0 before 3.3.6; 3.4.0; 3.4.0 |
Showing 18