Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/30 8:26 p.m.7 views

CVE-2026-39858 Traefik: Forwarded alias spoofing top pre-auth decision bypass

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass vulnerability in Traefik's ForwardAuth and snippet-based authentication middleware. Traefik's forwarded-header sanitization logic targets only...

7.8CVSS7.1AI score
SaveExploits0References10
Rows per page
Query Builder