Vulnerabilities in traefik
80 resultsCVE-2026-88879MEDIUMTraefik before v2.11.56 Identity Spoofing via Header AliasEPSS 0.3%CVE-2026-114639HIGHTraefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection PoolEPSS 0.3%CVE-2026-114637HIGHTraefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity LeakEPSS 0.3%CVE-2026-119574HIGHTraefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of ServiceEPSS 0.3%CVE-2026-54764MEDIUMForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=falseEPSS 0.3%CVE-2026-35051HIGHTraefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass authEPSS 0.3%CVE-2026-119573LOWTraefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secretEPSS 0.3%CVE-2026-114641MEDIUMTraefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round TripperEPSS 0.3%CVE-2026-41174MEDIUMTraefik Kubernetes CRD allows unauthorized cross-namespace middleware bindingEPSS 0.3%CVE-2026-114636HIGHTraefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP RouterEPSS 0.2%CVE-2026-54763HIGHTraefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuthEPSS 0.2%CVE-2025-66491MEDIUMTraefik has Inverted TLS Verification Logic in its ingress-nginx ProviderEPSS 0.2%CVE-2026-114638HIGHTraefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name CollisionEPSS 0.2%CVE-2026-112778MEDIUMTraefik before 2.11.46, 3.6.17, and 3.7.1 Cross-Namespace Resource Reference via Kubernetes AnnotationsEPSS 0.2%CVE-2026-114642HIGHTraefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round TripperEPSS 0.2%CVE-2026-114640HIGHTraefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP RouterEPSS 0.2%CVE-2026-119572HIGHTraefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX ProviderEPSS 0.2%CVE-2026-114635HIGHTraefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 SchemeEPSS 0.2%CVE-2026-71325MEDIUMTraefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRefEPSS 0.2%CVE-2026-114656MEDIUMTraefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host MatcherEPSS 0.2%