Known Vulnerabilities for products from Traefik
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Traefik".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-72875 json | Not Provided | 2026-08-10 | 2026-08-11 | |
| CVE-2026-72735 json | Not Provided | 2026-08-10 | 2026-08-10 | |
| CVE-2026-71327 json | Not Provided | 2026-08-06 | 2026-08-07 | |
| CVE-2026-71326 json | Not Provided | 2026-08-06 | 2026-08-08 | |
| CVE-2026-71325 json | Not Provided | 2026-08-06 | 2026-08-07 | |
| CVE-2026-71324 json | Not Provided | 2026-08-06 | 2026-08-07 | |
| CVE-2026-67309 json | Not Provided | 2026-08-01 | 2026-08-03 | |
| CVE-2026-65602 json | Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTC... | Not Provided | 2026-07-22 | 2026-08-06 |
| CVE-2026-65601 json | Traefik versions 3.7.0 through 3.7.6 contain a namespace confusion vulnerability in the Kubernetes Gateway API provider. When... | Not Provided | 2026-07-22 | 2026-08-06 |
| CVE-2026-65600 json | Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path travers... | Not Provided | 2026-07-22 | 2026-08-06 |
| CVE-2026-54765 json | Traefik is an open source HTTP reverse proxy and load balancer. From v3.7.0 prior to v3.7.6, Traefik's Kubernetes Gateway API... | Not Provided | 2026-07-06 | 2026-07-08 |
| CVE-2026-54764 json | Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's ForwardAuth middleware,... | Not Provided | 2026-07-06 | 2026-07-08 |
| CVE-2026-54763 json | Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's BasicAuth, DigestAuth, ... | Not Provided | 2026-07-06 | 2026-07-08 |
| CVE-2026-54762 json | Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium severity vulnerability in ... | Not Provided | 2026-06-23 | 2026-06-26 |
| CVE-2026-54761 json | Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.21 and 3.7.5, there is a high severity vulnerability in Trae... | Not Provided | 2026-06-23 | 2026-06-26 |
| CVE-2026-53622 json | Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerability in Traefik's HTTP/3 (QU... | Not Provided | 2026-06-23 | 2026-07-15 |
| CVE-2026-48491 json | Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik... | Not Provided | 2026-06-23 | 2026-07-15 |
| CVE-2026-48020 json | Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerabili... | Not Provided | 2026-06-23 | 2026-07-15 |
| CVE-2026-44774 json | Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.46, 3.6.17, and 3.7.1, Traefik's Kubernetes Gateway API pro... | Not Provided | 2026-05-15 | 2026-07-15 |
| CVE-2026-41263 json | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a timing side... | Not Provided | 2026-04-30 | 2026-05-01 |