CVE record · 1 source
CVE-2026-114636
CVSS 8.7Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for…
- Vendor
- F5, Kubernetes
- Product
- NGINX, Squid / HAProxy / Varnish, Kubernetes
- CVSS
- 8.7
- EPSS
- 0.002 (p16)
- Exposure class
- Web platform, Edge / VPN / firewall, Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for…
Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for ssl-passthrough Ingresses on non-TLS entry points never applies the Ingress's…