Known Vulnerabilities for products from Traefik
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Traefik".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-119574 json | Not Provided | 2026-10-30 | 2026-10-30 | |
| CVE-2026-119573 json | Not Provided | 2026-10-30 | 2026-10-30 | |
| CVE-2026-119572 json | Not Provided | 2026-10-30 | 2026-10-30 | |
| CVE-2026-114656 json | Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauthenticated clients to skip... | Not Provided | 2026-10-22 | 2026-10-30 |
| CVE-2026-114642 json | Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connection s... | Not Provided | 2026-10-22 | 2026-10-27 |
| CVE-2026-114641 json | Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend authen... | Not Provided | 2026-10-22 | 2026-10-28 |
| CVE-2026-114640 json | Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider t... | Not Provided | 2026-10-22 | 2026-10-28 |
| CVE-2026-114639 json | Not Provided | 2026-10-22 | 2026-10-22 | |
| CVE-2026-114638 json | Not Provided | 2026-10-22 | 2026-10-23 | |
| CVE-2026-114637 json | Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection p... | Not Provided | 2026-10-22 | 2026-10-28 |
| CVE-2026-114636 json | Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP rou... | Not Provided | 2026-10-22 | 2026-10-28 |
| CVE-2026-114635 json | Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when r... | Not Provided | 2026-10-22 | 2026-10-27 |
| CVE-2026-112778 json | Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kub... | Not Provided | 2026-10-19 | 2026-10-23 |
| CVE-2026-88879 json | Traefik is an HTTP reverse proxy and load balancer. In Traefik v1.x, v2.x through v2.11.55, and v3.0.0 through v3.7.11, heade... | Not Provided | 2026-09-10 | 2026-10-08 |
| CVE-2026-88878 json | Traefik is an HTTP reverse proxy and load balancer. In versions >= v2.8.2 through <= v2.11.55 and >= v3.0.0 through <= v3.7.1... | Not Provided | 2026-09-10 | 2026-10-08 |
| CVE-2026-88877 json | Traefik is a HTTP reverse proxy and load balancer. In versions >= v3.7.0 and <= v3.7.11, the Kubernetes ingress-nginx provide... | Not Provided | 2026-09-10 | 2026-10-08 |
| CVE-2026-88012 json | Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints do no... | Not Provided | 2026-09-10 | 2026-09-14 |
| CVE-2026-88011 json | Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-suppl... | Not Provided | 2026-09-10 | 2026-09-15 |
| CVE-2026-88010 json | Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, checkPassword in pkg/middlewares/au... | Not Provided | 2026-09-22 | 2026-10-29 |
| CVE-2026-88009 json | Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP... | Not Provided | 2026-09-10 | 2026-09-14 |