Skip to content
Noroxi

traefik records

71 published records for vendor traefik.

Researcher profile

Entered KEV
1 · 1.4%
Weaponized
1 · 1.4%
Pre-auth RCE
0
With a fix record
95.8%
Median publish → KEV
0 days

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

71 records
  • CVE-2023-44487
    90Now

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as

    HighCVSS 7.5KEVWeaponizedEPSS 99%

    siemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmwareOct 10, 2023

  • CVE-2026-85595
    37Monitor

    Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth

    CriticalCVSS 9.3No exploitEPSS 0%

    traefik · traefikSep 4, 2026

  • CVE-2026-88877
    37Monitor

    Traefik v3.7.0 Authentication Bypass via from-to-www-redirect

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    traefik · traefikSep 10, 2026

  • CVE-2026-88007
    36Monitor

    Traefik HTTP/3 Backend NTLM Connection Reuse

    CriticalCVSS 9.1No exploitEPSS 0%

    traefik · traefikSep 10, 2026

  • CVE-2025-32431
    35Monitor

    Traefik has a possible vulnerability with the path matchers

    HighCVSS 8.8No exploitEPSS 0%

    traefik · traefikApr 21, 2025

  • CVE-2026-88009
    35Monitor

    Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

    HighCVSS 8.8No exploitEPSS 0%

    traefik · traefikSep 10, 2026

  • CVE-2023-54365
    34Monitor

    Traefik - Denial of Service via HTTP/2 Request Handling

    HighCVSS 8.7No exploitEPSS 0%

    traefik · traefikJun 23, 2026

  • CVE-2021-32813
    32Monitor

    Drop Headers via Malicious Connection Header

    HighCVSS 8.1No exploitEPSS 1%

    traefik · traefikAug 3, 2021

  • CVE-2026-85596
    32Monitor

    Traefik v3.7 Authentication Bypass via TLS Option Conflict

    HighCVSS 8.2No exploitEPSS 0%

    traefik · traefikSep 4, 2026

  • CVE-2026-85597
    32Monitor

    Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict

    HighCVSS 8.2No exploitEPSS 0%

    traefik · traefikSep 4, 2026

  • CVE-2018-15598
    31Monitor

    Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's p

    HighCVSS 7.5No exploitEPSS 2%

    traefik · traefikAug 20, 2018

  • CVE-2019-12452
    31Monitor

    types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without

    HighCVSS 7.5No exploitEPSS 2%

    traefik · traefikMay 29, 2019

  • CVE-2022-23632
    31Monitor

    Traefik skips the router TLS configuration when the host header is an FQDN

    HighCVSS 7.5No exploitEPSS 1%

    traefik · traefikFeb 17, 2022

  • CVE-2026-48020
    31Monitor

    Traefik StripPrefix Route-Level Auth Bypass via Path Normalization

    HighCVSS 7.8Proof of conceptEPSS 0%

    traefik · traefikJun 23, 2026

  • CVE-2026-40912
    31Monitor

    Traefik: StripPrefixRegex auth bypass via Path/RawPath desync

    HighCVSS 7.8No exploitEPSS 0%

    traefik · traefikApr 30, 2026

  • CVE-2026-67309
    31Monitor

    Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass

    HighCVSS 7.8No exploitEPSS 0%

    traefik · traefikAug 1, 2026

  • CVE-2026-53622
    31Monitor

    Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts

    HighCVSS 7.8No exploitEPSS 0%

    traefik · traefikJun 23, 2026

  • CVE-2026-65600
    31Monitor

    Traefik before v2.11.52 Authentication Bypass via ReplacePathRegex

    HighCVSS 7.8No exploitEPSS 0%

    traefik · traefikJul 22, 2026

  • CVE-2026-39858
    31Monitor

    Traefik: Forwarded alias spoofing top pre-auth decision bypass

    HighCVSS 7.8No exploitEPSS 0%

    traefik · traefikApr 30, 2026

  • CVE-2026-32305
    31Monitor

    Traefik mTLS bypass via fragmented ClientHello SNI extraction failure

    HighCVSS 7.8No exploitEPSS 0%

    traefik · traefikMar 20, 2026

  • CVE-2026-48491
    31Monitor

    Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass

    HighCVSS 7.8No exploitEPSS 0%

    traefik · traefikJun 23, 2026

  • CVE-2026-35051
    31Monitor

    Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth

    HighCVSS 7.8No exploitEPSS 0%

    traefik · traefikApr 30, 2026

  • CVE-2026-54763
    31Monitor

    Traefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth

    HighCVSS 7.8No exploitEPSS 0%

    traefik · traefikJul 6, 2026

  • CVE-2019-20894
    30Monitor

    Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CL

    HighCVSS 7.5No exploitEPSS 1%

    traefik · traefikJul 2, 2020

  • CVE-2024-45410
    30Monitor

    HTTP client can remove the X-Forwarded headers in Traefik

    HighCVSS 7.5Proof of conceptEPSS 1%

    traefik · traefikSep 19, 2024