Browse CVEs

HIGH 8.8 CVE-2026-65601 Traefik versions 3.7.0 through 3.7.6 contain a namespace confusion vulnerability in the Kubernetes Gateway API provider. When resolving HTTPRoute.spe… Traefik 3.7.7+ Fix from $1,9502026-07-22 HIGH 8.8 CVE-2026-65602 Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTCP service serversTranspo… Traefik 3.6.23 / 3.7.7+ Fix from $1,9502026-07-22 MEDIUM 5.3 CVE-2026-65600 Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path traversal in the ReplacePathReg… Traefik 2.11.52 / 3.6.23+ Fix from $1,6002026-07-22 HIGH 8.5 CVE-2026-54765 Traefik is an open source HTTP reverse proxy and load balancer. From v3.7.0 prior to v3.7.6, Traefik's Kubernetes Gateway API provider may resolve tw… Traefik 3.7.6+ Fix from $1,9502026-07-06 CRITICAL 10.0 CVE-2026-54763 Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewa… Traefik 2.11.51 / 3.6.22+ Fix from $2,3002026-07-06 MEDIUM 5.8 CVE-2026-54764 Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's ForwardAuth middleware, even when configured wi… Traefik 2.11.51 / 3.6.22+ Fix from $1,6002026-07-06 HIGH 8.6 CVE-2026-54762 Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium severity vulnerability in Traefik's Kubernetes Ing… Traefik 3.7.5+ Fix from $1,9502026-06-23 HIGH 7.1 CVE-2026-54761 Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.21 and 3.7.5, there is a high severity vulnerability in Traefik's Kubernetes Gateway… Traefik 3.6.21 / 3.7.5+ Fix from $1,9502026-06-23 CRITICAL 10.0 CVE-2026-48491 Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting prote… Traefik 3.7.3+ Fix from $2,3002026-06-23 CRITICAL 10.0 CVE-2026-53622 Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration se… Traefik 3.7.3+ Fix from $2,3002026-06-23 CRITICAL 10.0 CVE-2026-48020 Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPre… Traefik 2.11.48 / 3.6.19+ Fix from $2,3002026-06-23 CRITICAL 9.9 CVE-2026-44774 Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.46, 3.6.17, and 3.7.1, Traefik's Kubernetes Gateway API provider allows a tenant wi… Traefik 2.11.46 / 3.6.17+ Fix from $2,3002026-05-15 MEDIUM 5.8 CVE-2026-41181 Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.44, 3.6.15, and 3.7.0-rc.3, there is an information disclosure vulnerability in Tra… Traefik 2.11.44 / 3.6.15+ Fix from $1,6002026-05-15 MEDIUM 6.4 CVE-2026-41174 Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a potential vulnerability in Traefik'… Traefik 2.11.43 / 3.6.14+ Fix from $1,6002026-04-30 CRITICAL 10.0 CVE-2026-35051 Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerabilit… Traefik 2.11.43 / 3.6.14+ Fix from $2,3002026-04-30 CRITICAL 10.0 CVE-2026-39858 Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass… Traefik 2.11.43 / 3.6.14+ Fix from $2,3002026-04-30 HIGH 8.2 CVE-2026-40912 Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass… Traefik 2.11.43 / 3.6.14+ Fix from $1,9502026-04-30 HIGH 8.8 CVE-2026-33433 Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.42, 3.6.11, and 3.7.0-ea.3, when `headerField` is configured with a non-ca… Traefik 2.11.42 / 3.6.12+ Fix from $1,9502026-03-27 HIGH 7.7 CVE-2026-32695 Traefik is an HTTP reverse proxy and load balancer. Prior to versions 3.6.11 and 3.7.0-ea.2, Traefik's Knative provider builds router rules by interp… Traefik 3.6.11+ Fix from $1,9502026-03-27 MEDIUM 5.3 CVE-2026-32305 Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 are vulnerable to mTLS byp… Traefik 2.11.41+ Fix from $1,6002026-03-20 MEDIUM 6.5 CVE-2026-29777 Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.10, A tenant with write access to an HTTPRoute resource can inject backtick-delimite… Traefik 3.6.10+ Fix from $1,6002026-03-11 HIGH 7.5 CVE-2026-29054 Traefik is an HTTP reverse proxy and load balancer. From version 2.11.9 to 2.11.37 and from version 3.1.3 to 3.6.8, there is a potential vulnerabilit… Traefik 2.11.38 / 3.6.9+ Fix from $1,9502026-03-05 HIGH 7.5 CVE-2026-26999 Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing TLS h… Traefik 2.11.38 / 3.6.9+ Fix from $1,9502026-03-05 HIGH 7.5 CVE-2026-25949 Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unau… Traefik 3.6.8+ Fix from $1,9502026-02-12 HIGH 7.5 CVE-2026-22045 Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.35 and 3.6.7, there is a potential vulnerability in Traefik ACME TLS certificates' … Traefik 2.11.35 / 3.6.7+ Fix from $1,9502026-01-15 MEDIUM 6.5 CVE-2025-66490 Traefik is an HTTP reverse proxy and load balancer. For versions prior to 2.11.32 and 2.11.31 through 3.6.2, requests using PathPrefix, Path or PathR… Traefik 2.11.32 / 3.6.3+ Fix from $1,6002025-12-09 MEDIUM 5.9 CVE-2025-66491 Traefik is an HTTP reverse proxy and load balancer. Versions 3.5.0 through 3.6.2 have inverted TLS verification logic in the nginx.ingress.kubernetes… Traefik 3.6.3+ Fix from $1,6002025-12-09 CRITICAL 9.8 CVE-2025-54386 Traefik is an HTTP reverse proxy and load balancer. In versions 2.11.27 and below, 3.0.0 through 3.4.4 and 3.5.0-rc1, a path traversal vulnerability … Traefik 2.11.7 / 3.4.4+ Fix from $2,3002025-08-02 CRITICAL 9.1 CVE-2025-47952 Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a potential vulnerability in T… Traefik 2.11.25 / 3.4.1+ Fix from $2,3002025-05-30 CRITICAL 9.1 CVE-2025-32431 Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. In versions prior to 2.11.24, 3.3.6, and 3.4.0-rc2. There is a potential vul… Traefik 2.11.24 / 3.3.6+ Fix from $2,3002025-04-21