traefik kayıtları
traefik üreticisine ait 71 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %1,4
- Silahlaştırılmış
- 1 · %1,4
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %95,8
- Yayından KEV’e ortanca
- 0 gün
Tekrar eden sınıflar
- CWE-400 Uncontrolled Resource Consumption7
- CWE-287 Improper Authentication6
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5
- CWE-295 Improper Certificate Validation5
- CWE-290 Authentication Bypass by Spoofing4
- CWE-770 Allocation of Resources Without Limits or Throttling4
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
71 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
90Hemen | CVE-2023-44487Silahlaştırılmış | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, assiemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmware · CWE-400 | Yüksek7,5 | KEV | %100,0 | 10 Eki 2023 |
37İzleyin | CVE-2026-85595İstismar yok | Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuthtraefik · traefik · CWE-287 | Kritik9,3 | — | %0,7 | 4 Eyl 2026 |
37İzleyin | CVE-2026-88877Kavram kanıtı | Traefik v3.7.0 Authentication Bypass via from-to-www-redirecttraefik · traefik · CWE-639 | Kritik9,3 | — | %0,6 | 10 Eyl 2026 |
36İzleyin | CVE-2026-88007İstismar yok | Traefik HTTP/3 Backend NTLM Connection Reusetraefik · traefik · CWE-287 | Kritik9,1 | — | %0,6 | 10 Eyl 2026 |
35İzleyin | CVE-2025-32431İstismar yok | Traefik has a possible vulnerability with the path matcherstraefik · traefik · CWE-22 | Yüksek8,8 | — | %0,9 | 21 Nis 2025 |
35İzleyin | CVE-2026-88009İstismar yok | Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access loggingtraefik · traefik · CWE-444 | Yüksek8,8 | — | %0,4 | 10 Eyl 2026 |
34İzleyin | CVE-2023-54365İstismar yok | Traefik - Denial of Service via HTTP/2 Request Handlingtraefik · traefik · CWE-400 | Yüksek8,7 | — | %0,8 | 23 Haz 2026 |
32İzleyin | CVE-2021-32813İstismar yok | Drop Headers via Malicious Connection Headertraefik · traefik · CWE-913 | Yüksek8,1 | — | %1,1 | 3 Ağu 2021 |
32İzleyin | CVE-2026-85596İstismar yok | Traefik v3.7 Authentication Bypass via TLS Option Conflicttraefik · traefik · CWE-287 | Yüksek8,2 | — | %0,4 | 4 Eyl 2026 |
32İzleyin | CVE-2026-85597İstismar yok | Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflicttraefik · traefik · CWE-863 | Yüksek8,2 | — | %0,4 | 4 Eyl 2026 |
31İzleyin | CVE-2018-15598İstismar yok | Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's ptraefik · traefik · CWE-287 | Yüksek7,5 | — | %2,9 | 20 Ağu 2018 |
31İzleyin | CVE-2019-12452İstismar yok | types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed withouttraefik · traefik · CWE-522 | Yüksek7,5 | — | %2,5 | 29 May 2019 |
31İzleyin | CVE-2022-23632İstismar yok | Traefik skips the router TLS configuration when the host header is an FQDNtraefik · traefik · CWE-295 | Yüksek7,5 | — | %1,7 | 17 Şub 2022 |
31İzleyin | CVE-2026-48020Kavram kanıtı | Traefik StripPrefix Route-Level Auth Bypass via Path Normalizationtraefik · traefik · CWE-288 | Yüksek7,8 | — | %0,8 | 23 Haz 2026 |
31İzleyin | CVE-2026-40912İstismar yok | Traefik: StripPrefixRegex auth bypass via Path/RawPath desynctraefik · traefik · CWE-706 | Yüksek7,8 | — | %0,7 | 30 Nis 2026 |
31İzleyin | CVE-2026-67309İstismar yok | Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypasstraefik · traefik · CWE-22 | Yüksek7,8 | — | %0,7 | 1 Ağu 2026 |
31İzleyin | CVE-2026-53622İstismar yok | Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hoststraefik · traefik · CWE-288 | Yüksek7,8 | — | %0,6 | 23 Haz 2026 |
31İzleyin | CVE-2026-65600İstismar yok | Traefik before v2.11.52 Authentication Bypass via ReplacePathRegextraefik · traefik · CWE-22 | Yüksek7,8 | — | %0,6 | 22 Tem 2026 |
31İzleyin | CVE-2026-39858İstismar yok | Traefik: Forwarded alias spoofing top pre-auth decision bypasstraefik · traefik · CWE-290 | Yüksek7,8 | — | %0,6 | 30 Nis 2026 |
31İzleyin | CVE-2026-32305İstismar yok | Traefik mTLS bypass via fragmented ClientHello SNI extraction failuretraefik · traefik · CWE-287 | Yüksek7,8 | — | %0,5 | 20 Mar 2026 |
31İzleyin | CVE-2026-48491İstismar yok | Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypasstraefik · traefik · CWE-288 | Yüksek7,8 | — | %0,4 | 23 Haz 2026 |
31İzleyin | CVE-2026-35051İstismar yok | Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass authtraefik · traefik · CWE-345 | Yüksek7,8 | — | %0,3 | 30 Nis 2026 |
31İzleyin | CVE-2026-54763İstismar yok | Traefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuthtraefik · traefik · CWE-178 | Yüksek7,8 | — | %0,2 | 6 Tem 2026 |
30İzleyin | CVE-2019-20894İstismar yok | Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLtraefik · traefik · CWE-295 | Yüksek7,5 | — | %1,6 | 2 Tem 2020 |
30İzleyin | CVE-2024-45410Kavram kanıtı | HTTP client can remove the X-Forwarded headers in Traefiktraefik · traefik · CWE-345 | Yüksek7,5 | — | %1,5 | 19 Eyl 2024 |
- CVE-2023-4448790Hemen
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100siemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmware10 Eki 2023
- CVE-2026-8559537İzleyin
Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth
KritikCVSS 9,3İstismar yokEPSS %1traefik · traefik4 Eyl 2026
- CVE-2026-8887737İzleyin
Traefik v3.7.0 Authentication Bypass via from-to-www-redirect
KritikCVSS 9,3Kavram kanıtıEPSS %1traefik · traefik10 Eyl 2026
- CVE-2026-8800736İzleyin
Traefik HTTP/3 Backend NTLM Connection Reuse
KritikCVSS 9,1İstismar yokEPSS %1traefik · traefik10 Eyl 2026
- CVE-2025-3243135İzleyin
Traefik has a possible vulnerability with the path matchers
YüksekCVSS 8,8İstismar yokEPSS %1traefik · traefik21 Nis 2025
- CVE-2026-8800935İzleyin
Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging
YüksekCVSS 8,8İstismar yokEPSS %0traefik · traefik10 Eyl 2026
- CVE-2023-5436534İzleyin
Traefik - Denial of Service via HTTP/2 Request Handling
YüksekCVSS 8,7İstismar yokEPSS %1traefik · traefik23 Haz 2026
- CVE-2021-3281332İzleyin
Drop Headers via Malicious Connection Header
YüksekCVSS 8,1İstismar yokEPSS %1traefik · traefik3 Ağu 2021
- CVE-2026-8559632İzleyin
Traefik v3.7 Authentication Bypass via TLS Option Conflict
YüksekCVSS 8,2İstismar yokEPSS %0traefik · traefik4 Eyl 2026
- CVE-2026-8559732İzleyin
Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict
YüksekCVSS 8,2İstismar yokEPSS %0traefik · traefik4 Eyl 2026
- CVE-2018-1559831İzleyin
Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's p
YüksekCVSS 7,5İstismar yokEPSS %3traefik · traefik20 Ağu 2018
- CVE-2019-1245231İzleyin
types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without
YüksekCVSS 7,5İstismar yokEPSS %3traefik · traefik29 May 2019
- CVE-2022-2363231İzleyin
Traefik skips the router TLS configuration when the host header is an FQDN
YüksekCVSS 7,5İstismar yokEPSS %2traefik · traefik17 Şub 2022
- CVE-2026-4802031İzleyin
Traefik StripPrefix Route-Level Auth Bypass via Path Normalization
YüksekCVSS 7,8Kavram kanıtıEPSS %1traefik · traefik23 Haz 2026
- CVE-2026-4091231İzleyin
Traefik: StripPrefixRegex auth bypass via Path/RawPath desync
YüksekCVSS 7,8İstismar yokEPSS %1traefik · traefik30 Nis 2026
- CVE-2026-6730931İzleyin
Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass
YüksekCVSS 7,8İstismar yokEPSS %1traefik · traefik1 Ağu 2026
- CVE-2026-5362231İzleyin
Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts
YüksekCVSS 7,8İstismar yokEPSS %1traefik · traefik23 Haz 2026
- CVE-2026-6560031İzleyin
Traefik before v2.11.52 Authentication Bypass via ReplacePathRegex
YüksekCVSS 7,8İstismar yokEPSS %1traefik · traefik22 Tem 2026
- CVE-2026-3985831İzleyin
Traefik: Forwarded alias spoofing top pre-auth decision bypass
YüksekCVSS 7,8İstismar yokEPSS %1traefik · traefik30 Nis 2026
- CVE-2026-3230531İzleyin
Traefik mTLS bypass via fragmented ClientHello SNI extraction failure
YüksekCVSS 7,8İstismar yokEPSS %0traefik · traefik20 Mar 2026
- CVE-2026-4849131İzleyin
Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass
YüksekCVSS 7,8İstismar yokEPSS %0traefik · traefik23 Haz 2026
- CVE-2026-3505131İzleyin
Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth
YüksekCVSS 7,8İstismar yokEPSS %0traefik · traefik30 Nis 2026
- CVE-2026-5476331İzleyin
Traefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth
YüksekCVSS 7,8İstismar yokEPSS %0traefik · traefik6 Tem 2026
- CVE-2019-2089430İzleyin
Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CL
YüksekCVSS 7,5İstismar yokEPSS %2traefik · traefik2 Tem 2020
- CVE-2024-4541030İzleyin
HTTP client can remove the X-Forwarded headers in Traefik
YüksekCVSS 7,5Kavram kanıtıEPSS %2traefik · traefik19 Eyl 2024