traefik vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20224
3. 20234
4. 20244
5. 20255
6. 202662

Newest CVEs

• CVE-2026-121966

  Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak

  traefik · traefik

  High7.0
• CVE-2026-119574

  Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Service

  traefik · traefik

  High8.2
• CVE-2026-119573

  Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secret

  traefik · traefik

  Low2.1
• CVE-2026-119572

  Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider

  traefik · traefik

  High7.0
• CVE-2026-114656

  Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher

  traefik · traefik

  Medium6.9
• CVE-2026-114642

  Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper

  traefik · traefik

  High7.0
• CVE-2026-114641

  Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper

  traefik · traefik

  Medium6.3
• CVE-2026-114640

  Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router

  traefik · traefik

  High7.0
• CVE-2026-114639

  Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool

  traefik · traefik

  High7.0
• CVE-2026-114638

  Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision

  traefik · traefik

  High7.0