Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: traefik 3.6.23 Clear all filters
TI-2026-46765 CVE-2026-65602 · GHSA-42cj-m3vj-89wv

Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass

Priority LOW 24

Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTCP service serversTransport references (the allowlist was only enforced for HTTP serversTranspor…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00333 Published 2026-07-22 Partial fix · 3.6.23, 3.7.7 CWE-863
TI-2026-46763 CVE-2026-65600 · GHSA-cxjq-mrr5-89rv

Traefik before v2.11.52 Authentication Bypass via ReplacePathRegex

Priority MEDIUM 41

Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path traversal in the ReplacePathRegex middleware.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.00621 Published 2026-07-22 Fixed in 2.11.52, 3.6.23 +1 CWE-22