Skip to content

CVE record · 1 source

CVE-2026-114640

CVSS 8.7

Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider that forwards…

Vendor: Kubernetes
Product: Squid / HAProxy / Varnish, Kubernetes
CVSS: 8.7
EPSS: 0.002 (p9)
Exposure class: Edge / VPN / firewall, Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

22

CVE NVD 10d ago

Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider that forwards…

Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider that forwards client-supplied Ssl-Client-* headers on the plaintext HTTP router. When ssl-redirect is…

CVSS 8.7 CVE-2026-114640 Kubernetes