Skip to content

CVE record · 1 source

CVE-2026-114635

CVSS 8.7

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil.

Product: Squid / HAProxy / Varnish, Go / Rust toolchains
CVSS: 8.7
EPSS: 0.002 (p8)
Exposure class: Edge / VPN / firewall, Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

22

CVE NVD 10d ago

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil.

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unauthenticated clients can send HTTP/2 requests with the :scheme http…

CVSS 8.7 CVE-2026-114635