Vulnerabilidades em traefik

80 resultados
Análise Vexday

Traefik apresenta 43 vulnerabilidades catalogadas, com 15 publicadas nos últimos 90 dias, indicando ritmo ativo de descobertas. Embora nenhuma esteja sob exploração ativa conhecida (KEV), a fraqueza dominante em traversal de diretório (CWE-22) e uma vulnerabilidade crítica requerem atenção prioritária em ambientes de produção.

CVE-2026-88879MEDIUMTraefik before v2.11.56 Identity Spoofing via Header AliasEPSS 0.3%CVE-2026-114639HIGHTraefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection PoolEPSS 0.3%CVE-2026-114637HIGHTraefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity LeakEPSS 0.3%CVE-2026-119574HIGHTraefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of ServiceEPSS 0.3%CVE-2026-54764MEDIUMForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=falseEPSS 0.3%CVE-2026-35051HIGHTraefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass authEPSS 0.3%CVE-2026-119573LOWTraefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secretEPSS 0.3%CVE-2026-114641MEDIUMTraefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round TripperEPSS 0.3%CVE-2026-41174MEDIUMTraefik Kubernetes CRD allows unauthorized cross-namespace middleware bindingEPSS 0.3%CVE-2026-114636HIGHTraefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP RouterEPSS 0.2%CVE-2026-54763HIGHTraefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuthEPSS 0.2%CVE-2025-66491MEDIUMTraefik has Inverted TLS Verification Logic in its ingress-nginx ProviderEPSS 0.2%CVE-2026-114638HIGHTraefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name CollisionEPSS 0.2%CVE-2026-112778MEDIUMTraefik before 2.11.46, 3.6.17, and 3.7.1 Cross-Namespace Resource Reference via Kubernetes AnnotationsEPSS 0.2%CVE-2026-114642HIGHTraefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round TripperEPSS 0.2%CVE-2026-114640HIGHTraefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP RouterEPSS 0.2%CVE-2026-119572HIGHTraefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX ProviderEPSS 0.2%CVE-2026-114635HIGHTraefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 SchemeEPSS 0.2%CVE-2026-71325MEDIUMTraefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRefEPSS 0.2%CVE-2026-114656MEDIUMTraefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host MatcherEPSS 0.2%