Skip to content

CVE record · 1 source

CVE-2026-121966

CVSS 8.7

Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requests) through an auth-server…

Vendor: Traefik
Product: traefik
CVSS v3.1: 8.7 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness: CWE-488
Exposure class: Identity, Web platform, Edge / VPN / firewall, Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

43

CVE NVD 1h ago

Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requests) through an auth-server…

Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requests) through an auth-server connection pool shared by all clients, exposing connection-bound NTLM or…

CVSS 8.7 CVE-2026-121966 Traefik