Vulnerability index

Browse CVEs

47 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Traefik HIGH 8.8
CVE-2026-65601

Traefik versions 3.7.0 through 3.7.6 contain a namespace confusion vulnerability in the Kubernetes Gateway API provider. When resolving HTTPRoute.spe…

Fix: 3.7.7+
Fix from $1,950 2026-07-22
Traefik HIGH 8.8
CVE-2026-65602

Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTCP service serversTranspo…

Fix: 3.6.23 / 3.7.7+
Fix from $1,950 2026-07-22
Traefik MEDIUM 5.3
CVE-2026-65600

Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path traversal in the ReplacePathReg…

Fix: 2.11.52 / 3.6.23+
Fix from $1,600 2026-07-22
Traefik HIGH 8.5
CVE-2026-54765

Traefik is an open source HTTP reverse proxy and load balancer. From v3.7.0 prior to v3.7.6, Traefik's Kubernetes Gateway API provider may resolve tw…

Fix: 3.7.6+
Fix from $1,950 2026-07-06
Traefik CRITICAL 10.0
CVE-2026-54763

Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewa…

Fix: 2.11.51 / 3.6.22+
Fix from $2,300 2026-07-06
Traefik MEDIUM 5.8
CVE-2026-54764

Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's ForwardAuth middleware, even when configured wi…

Fix: 2.11.51 / 3.6.22+
Fix from $1,600 2026-07-06
Traefik HIGH 8.6
CVE-2026-54762

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium severity vulnerability in Traefik's Kubernetes Ing…

Fix: 3.7.5+
Fix from $1,950 2026-06-23
Traefik HIGH 7.1
CVE-2026-54761

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.21 and 3.7.5, there is a high severity vulnerability in Traefik's Kubernetes Gateway…

Fix: 3.6.21 / 3.7.5+
Fix from $1,950 2026-06-23
Traefik CRITICAL 10.0
CVE-2026-48491

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting prote…

Fix: 3.7.3+
Fix from $2,300 2026-06-23
Traefik CRITICAL 10.0
CVE-2026-53622

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration se…

Fix: 3.7.3+
Fix from $2,300 2026-06-23
Traefik CRITICAL 10.0
CVE-2026-48020

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPre…

Fix: 2.11.48 / 3.6.19+
Fix from $2,300 2026-06-23
Traefik CRITICAL 9.9
CVE-2026-44774

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.46, 3.6.17, and 3.7.1, Traefik's Kubernetes Gateway API provider allows a tenant wi…

Fix: 2.11.46 / 3.6.17+
Fix from $2,300 2026-05-15
Traefik MEDIUM 5.8
CVE-2026-41181

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.44, 3.6.15, and 3.7.0-rc.3, there is an information disclosure vulnerability in Tra…

Fix: 2.11.44 / 3.6.15+
Fix from $1,600 2026-05-15
Traefik MEDIUM 6.4
CVE-2026-41174

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a potential vulnerability in Traefik'…

Fix: 2.11.43 / 3.6.14+
Fix from $1,600 2026-04-30
Traefik CRITICAL 10.0
CVE-2026-35051

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerabilit…

Fix: 2.11.43 / 3.6.14+
Fix from $2,300 2026-04-30
Traefik CRITICAL 10.0
CVE-2026-39858

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass…

Fix: 2.11.43 / 3.6.14+
Fix from $2,300 2026-04-30
Traefik HIGH 8.2
CVE-2026-40912

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass…

Fix: 2.11.43 / 3.6.14+
Fix from $1,950 2026-04-30
Traefik HIGH 8.8
CVE-2026-33433

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.42, 3.6.11, and 3.7.0-ea.3, when `headerField` is configured with a non-ca…

Fix: 2.11.42 / 3.6.12+
Fix from $1,950 2026-03-27
Traefik HIGH 7.7
CVE-2026-32695

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 3.6.11 and 3.7.0-ea.2, Traefik's Knative provider builds router rules by interp…

Fix: 3.6.11+
Fix from $1,950 2026-03-27
Traefik MEDIUM 5.3
CVE-2026-32305

Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 are vulnerable to mTLS byp…

Fix: 2.11.41+
Fix from $1,600 2026-03-20
Traefik MEDIUM 6.5
CVE-2026-29777

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.10, A tenant with write access to an HTTPRoute resource can inject backtick-delimite…

Fix: 3.6.10+
Fix from $1,600 2026-03-11
Traefik HIGH 7.5
CVE-2026-29054

Traefik is an HTTP reverse proxy and load balancer. From version 2.11.9 to 2.11.37 and from version 3.1.3 to 3.6.8, there is a potential vulnerabilit…

Fix: 2.11.38 / 3.6.9+
Fix from $1,950 2026-03-05
Traefik HIGH 7.5
CVE-2026-26999

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing TLS h…

Fix: 2.11.38 / 3.6.9+
Fix from $1,950 2026-03-05
Traefik HIGH 7.5
CVE-2026-25949

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unau…

Fix: 3.6.8+
Fix from $1,950 2026-02-12
Traefik HIGH 7.5
CVE-2026-22045

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.35 and 3.6.7, there is a potential vulnerability in Traefik ACME TLS certificates' …

Fix: 2.11.35 / 3.6.7+
Fix from $1,950 2026-01-15
Traefik MEDIUM 6.5
CVE-2025-66490

Traefik is an HTTP reverse proxy and load balancer. For versions prior to 2.11.32 and 2.11.31 through 3.6.2, requests using PathPrefix, Path or PathR…

Fix: 2.11.32 / 3.6.3+
Fix from $1,600 2025-12-09
Traefik MEDIUM 5.9
CVE-2025-66491

Traefik is an HTTP reverse proxy and load balancer. Versions 3.5.0 through 3.6.2 have inverted TLS verification logic in the nginx.ingress.kubernetes…

Fix: 3.6.3+
Fix from $1,600 2025-12-09
Traefik CRITICAL 9.8
CVE-2025-54386

Traefik is an HTTP reverse proxy and load balancer. In versions 2.11.27 and below, 3.0.0 through 3.4.4 and 3.5.0-rc1, a path traversal vulnerability …

Fix: 2.11.7 / 3.4.4+
Fix from $2,300 2025-08-02
Traefik CRITICAL 9.1
CVE-2025-47952

Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a potential vulnerability in T…

Fix: 2.11.25 / 3.4.1+
Fix from $2,300 2025-05-30
Traefik CRITICAL 9.1
CVE-2025-32431

Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. In versions prior to 2.11.24, 3.3.6, and 3.4.0-rc2. There is a potential vul…

Fix: 2.11.24 / 3.3.6+
Fix from $2,300 2025-04-21