Skip to content

CVE record · 1 source

CVE-2026-119573

CVSS 4.4

Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cross-namespace check on the…

Vendor: Traefik
Product: traefik
CVSS v3.1: 4.4 AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Weakness: CWE-863
Exposure class: Web platform, Edge / VPN / firewall, Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

17

CVE NVD 5d ago

Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cross-namespace check on the…

Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cross-namespace check on the auth-tls-secret annotation when a cached client authentication TLS option is…

CVSS 4.4 CVE-2026-119573 Traefik