Skip to content

CVE record · 1 source

CVE-2026-114638

CVSS 8.7

Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider that merges client CAs when…

Vendor: F5, Kubernetes
Product: NGINX, Squid / HAProxy / Varnish, Kubernetes
CVSS: 8.7
EPSS: 0.002 (p12)
Exposure class: Web platform, Edge / VPN / firewall, Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

22

CVE NVD 10d ago

Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider that merges client CAs when…

Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider that merges client CAs when auth-tls-secret names collide after dot-to-dash normalization. Attackers holding…

CVSS 8.7 CVE-2026-114638 F5 Kubernetes