1 matches found
GO-2026-5152 Traefik: SNICheck ignores wildcard TLSOptions mappings in github.com/traefik/traefik
The SNICheck middleware in Traefik ignores wildcard TLSOptions mappings, allowing an unauthenticated attacker to bypass mTLS requirements by using a domain-fronted request. This occurs because the middleware compares the TLS options name used during the handshake with a pre-computed value that ma...
10CVSS5.9AI score0.00357EPSS
SaveExploits1References4
20