CVE-2026-114656

Traefik versions prior to 2.11.58 and 3.7.13 are susceptible to an authentication bypass vulnerability. The root cause is that negated Host matchers (e.g., !Host()) are incorrectly counted as served domains. This creates a TLS options conflict when a router rule is used, causing the system to fal...