CVE record · 1 source
CVE-2026-114639
CVSS 8.7Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthenticated with an…
- Vendor
- Microsoft
- Product
- Active Directory / Entra ID, Squid / HAProxy / Varnish
- CVSS
- 8.7
- EPSS
- 0.003 (p22)
- Exposure class
- Identity, Edge / VPN / firewall
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthenticated with an…
Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthenticated with an Authorization: Negotiate token authenticates a socket in the globally shared backend…