Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 444Last 24 hours2,721 in the last 7 days
- 16,929Last 30 days1,562 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 32 | 25 | 2 | 0 | 62 | 80 |
| 2025 | 0 | 2 | 2 | 1 | 0 | 5 | 18 |
| 2024 | 1 | 2 | 1 | 0 | 0 | 4 | 13 |
| 2023 | 0 | 2 | 2 | 0 | 0 | 4 | 9 |
| 2022 | 0 | 3 | 0 | 1 | 0 | 4 | 5 |
| 2021 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-121966 | Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leaktraefik · traefik | High7.0 |
| CVE-2026-119574 | Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Servicetraefik · traefik | High8.2 |
| CVE-2026-119573 | Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secrettraefik · traefik | Low2.1 |
| CVE-2026-119572 | Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Providertraefik · traefik | High7.0 |
| CVE-2026-114656 | Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matchertraefik · traefik | Medium6.9 |
| CVE-2026-114642 | Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Trippertraefik · traefik | High7.0 |
| CVE-2026-114641 | Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Trippertraefik · traefik | Medium6.3 |
| CVE-2026-114640 | Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Routertraefik · traefik | High7.0 |
| CVE-2026-114639 | Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pooltraefik · traefik | High7.0 |
| CVE-2026-114638 | Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collisiontraefik · traefik | High7.0 |
| CVE-2026-114637 | Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leaktraefik · traefik | High7.0 |
| CVE-2026-114636 | Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Routertraefik · traefik | High7.0 |
| CVE-2026-114635 | Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Schemetraefik · traefik | High7.0 |
| CVE-2026-112778 | Traefik before 2.11.46, 3.6.17, and 3.7.1 Cross-Namespace Resource Reference via Kubernetes Annotationstraefik · traefik | Medium6.4 |
| CVE-2026-88010 | Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracletraefik · traefik | Medium6.3 |
| CVE-2026-88012 | Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unboundedtraefik · traefik | Medium5.3 |
| CVE-2026-88011 | Traefik: ForwardAuth identity spoofing via dot-form header aliastraefik · traefik | Medium5.3 |
| CVE-2026-88009 | Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access loggingtraefik · traefik | High8.8 |
| CVE-2026-88008 | Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorizationtraefik · traefik | High7.0 |
| CVE-2026-88007 | Traefik HTTP/3 Backend NTLM Connection Reusetraefik · traefik | Critical9.1 |
| CVE-2026-88004 | Traefik entrypoint header-name sanitization bypassed via request trailerstraefik · traefik | High7.0 |
| CVE-2026-88879 | Traefik before v2.11.56 Identity Spoofing via Header Aliastraefik · traefik | Medium5.3 |
| CVE-2026-88878 | Traefik v2.8.2 through v3.6 HTTP/3 Timeout Bypasstraefik · traefik | Medium6.9 |
| CVE-2026-88877 | Traefik v3.7.0 Authentication Bypass via from-to-www-redirecttraefik · traefik | Critical9.3 |
| CVE-2026-85597 | Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflicttraefik · traefik | High8.2 |
| CVE-2026-85596 | Traefik v3.7 Authentication Bypass via TLS Option Conflicttraefik · traefik | High8.2 |
| CVE-2026-85595 | Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuthtraefik · traefik | Critical9.3 |
| CVE-2026-85594 | Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middlewaretraefik · traefik | High7.0 |
| CVE-2026-71327 | Traefik: Gateway API route identity collision allows cross-namespace backend hijackingtraefik · traefik | High7.6 |
| CVE-2026-71326 | Traefik: BasicAuth singleflight key collision allows authenticated identity spoofingtraefik · traefik | Low2.1 |
| CVE-2026-71325 | Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendReftraefik · traefik | Medium4.8 |
| CVE-2026-71324 | Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pooltraefik · traefik | High7.0 |
| CVE-2026-67309 | Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypasstraefik · traefik | High7.8 |
| CVE-2026-65602 | Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypasstraefik · traefik | Medium5.3 |
| CVE-2026-65601 | Traefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionReftraefik · traefik | Medium5.3 |
| CVE-2026-65600 | Traefik before v2.11.52 Authentication Bypass via ReplacePathRegextraefik · traefik | High7.8 |
| CVE-2026-54763 | Traefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuthtraefik · traefik | High7.8 |
| CVE-2026-54765 | Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:porttraefik · traefik | Medium6.3 |
| CVE-2026-54764 | ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=falsetraefik · traefik | Medium6.9 |
| CVE-2026-54762 | Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution failstraefik · traefik | Medium5.9 |
| CVE-2026-54761 | Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik servicestraefik · traefik | Medium6.0 |
| CVE-2026-53622 | Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hoststraefik · traefik | High7.8 |
| CVE-2026-48491 | Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypasstraefik · traefik | High7.8 |
| CVE-2026-48020 | Traefik StripPrefix Route-Level Auth Bypass via Path Normalizationtraefik · traefik | High7.8 |
| CVE-2023-54365 | Traefik - Denial of Service via HTTP/2 Request HandlingTraefik · Traefik | High8.7 |
| CVE-2026-44774 | Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=falsetraefik · traefik | Medium6.4 |
| CVE-2026-41181 | Traefik: Errors middleware forwards Authorization and Cookie headers to separate error page servicetraefik · traefik | Medium6.9 |
| CVE-2026-41263 | Traefik: BasicAuth middleware: timing side-channel vulnerabilitytraefik · traefik | Medium6.3 |
| CVE-2026-40912 | Traefik: StripPrefixRegex auth bypass via Path/RawPath desynctraefik · traefik | High7.8 |
| CVE-2026-39858 | Traefik: Forwarded alias spoofing top pre-auth decision bypasstraefik · traefik | High7.8 |