Traefik security vulnerabilities
Open-source infrastructure. Public CVE monitoring for Traefik. Vendor security advisories are linked on this page.
Built for Operators of this product.
32 public records · 0 security-fix timeline events. 0 published in the last 7 days. 25 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 7
- Medium 1
- Low 0
2026-08-058 issues2026-11-02
Known exploited
View all known exploitedRecently published
Browse catalog- High7.0Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil.Check if you run itEPSS 0.19%Oct 22, 2026
- HighForwardAuth shares the auth-server connection pool, leaking NTLM/Negotiate-bound identity across clientsOpen the advisoryOct 21, 2026
- Highingress-nginx provider: mTLS (auth-tls-secret) silently disabled for a host when another Ingress on the same host has no matching auth-tls annotationOpen the advisoryOct 16, 2026
- HighKubernetes Ingress NGINX provider: ssl-passthrough sibling HTTP router serves the auth-protected backend without authOpen the advisoryOct 7, 2026
- Highsnicheck skips the check when is nil (HTTP/2 )Open the advisoryOct 7, 2026
- Medium6.3Traefik is an open source HTTP reverse proxy and load balancer.Check if you run itEPSS 0.31%Sep 22, 2026
- High7.8traefik traefik Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.62%Jul 22, 2026
- Medium6.4Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.47%May 15, 2026
- Medium6.9Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.45%May 15, 2026
- Medium6.3Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.37%Apr 30, 2026