1877 matches found
CVE-2026-54761-poc
CVE-2026-54761: Traefik Kubernetes Gateway crossProviderNamespaces Bypass PoC 日本語版はこちら Description This repository contains a local Proof of Concept PoC for CVE-2026-54761 , a high severity vulnerability in Traefik's Kubernetes Gateway provider. The vulnerability affects the crossProviderNamespac...
Traefik - Open Redirect
Traefik before 1.7.26, 2.2.8, and 2.3.0-rc3 contains an open redirect vulnerability in the X-Forwarded-Prefix header. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-15129 info: name:...
Traefik < 2.11.55 / 3.0.0 - 3.7.10 - Digest Authentication Bypass
Traefik 2.11.55 contains an authentication bypass caused by digestAuth middleware returning empty secret for unknown usernames, letting attackers bypass authentication on digestAuth-protected routes without valid credentials. id: CVE-2026-85595 info: name: Traefik 2.11.55 / 3.0.0 - 3.7.10 - Diges...
authelia
!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...
traefik-CVE-2024-45410-poc
Shadow Corp CTF Challenge Welcome to the Shadow Corp Capture the Flag CTF challenge! This challenge will test your skills in identifying and exploiting vulnerabilities related to security headers and HTTP proxy behavior. Your mission is to bypass protections and uncover secrets hidden within the...
CVE-2026-88877-PoC-pwnVader
CVE-2026-88877 — Traefik v3.7.0–v3.7.11 — Authentication bypass via from-to-www-redirect Author: pwnVader · License: MIT repository root | ---|--- Component| Traefik Kubernetes ingress-nginx provider, providers.kubernetesingressnginx Type| CWE-639 — Authorization bypass through user-controlled ke...
GO-2026-6880 vulnerabilities
Vulnerabilities for packages: sigstore-scaffolding, tekton-pipelines, traefik, kserve...
GO-2026-6865 vulnerabilities
Vulnerabilities for packages: etcd, terragrunt, newrelic-fluent-bit-output, argocd-image-updater, opa-envoy, sftpgo, crossplane, verticadb-operator, kaniko, weaviate, spegel, osv-scanner, gitea, eksctl, cadvisor, zarf, undock, tfsec, cortex, terraform-provider-pagerduty, victoriametrics,...
GO-2026-6880 vulnerabilities
Vulnerabilities for packages: sigstore-scaffolding-fips, tekton-pipelines, kserve, kserve-fips, traefik-fips, kserve-localmodelnode-agent, sigstore-scaffolding, kserve-localmodelnode-agent-fips, tekton-pipelines-fips, traefik...
GO-2026-6865 vulnerabilities
Vulnerabilities for packages: tkn, backup-restore-operator, gitleaks, eksctl, trivy-operator-fips, kwok, rancher-system-agent, haproxy-ingress, manifest-tool, kafkaexporter, grafana-zipkin-datasource, loki, k3d, grafana-pyroscope-fips, prometheus-geomys-fips, crossplane, terraform-provider-cosign...
CVE-2026-116591 vulnerabilities
Vulnerabilities for packages: etcd, terragrunt, newrelic-fluent-bit-output, argocd-image-updater, opa-envoy, sftpgo, crossplane, verticadb-operator, kaniko, weaviate, spegel, osv-scanner, gitea, eksctl, cadvisor, zarf, undock, tfsec, cortex, terraform-provider-pagerduty, victoriametrics,...
GHSA-FPMH-FRQ8-7RJ8 vulnerabilities
Vulnerabilities for packages: etcd, terragrunt, newrelic-fluent-bit-output, argocd-image-updater, opa-envoy, sftpgo, crossplane, verticadb-operator, kaniko, weaviate, spegel, osv-scanner, gitea, eksctl, cadvisor, zarf, undock, tfsec, cortex, terraform-provider-pagerduty, victoriametrics,...
CVE-2026-119574
A flaw was found in Traefik. A race condition in the FastProxy component allows an unauthenticated remote attacker to cause a Denial of Service DoS. By repeatedly opening and aborting upgraded protocol connections, such as WebSockets, an attacker can corrupt shared internal buffers, triggering a...
CVE-2026-119573
A flaw was found in Traefik. An authorization bypass vulnerability exists in the Kubernetes Ingress NGINX provider when cached client authentication Transport Layer Security TLS configurations are reused. An authenticated user with permissions to create Ingress resources can bypass cross-namespac...
CVE-2026-121966
A flaw was found in Traefik. The ForwardAuth middleware routes authentication requests through a connection pool shared across all clients, failing to isolate connection-bound authentication protocols such as NT LAN Manager NTLM or Negotiate. An unauthenticated remote attacker could exploit this...
CVE-2026-114656
A flaw was found in Traefik. An authentication bypass vulnerability allows an unauthenticated remote attacker to bypass client certificate verification and access protected backend systems. This issue occurs when routing rules using negated host matchers create a Transport Layer Security TLS...
CVE-2026-114642
A flaw was found in Traefik. An unauthenticated remote attacker can bypass Transport Layer Security TLS certificate verification and security controls for backend services. Due to improper connection handling during authentication challenges, Traefik reuses one service's TLS configuration for...
CVE-2026-114640
A flaw was found in Traefik. When plaintext routing is used and client certificate forwarding is enabled without enforcing secure redirection, the Ingress-NGINX provider forwards client-provided SSL headers directly to upstream backend services. An unauthenticated remote attacker can exploit this...
CVE-2026-114639
A flaw was found in Traefik. When a user authenticates to a backend service using an HTTP Negotiate authorization token, Traefik places the authenticated connection into a globally shared connection pool without isolating it. A remote, unauthenticated attacker connecting on a separate session can...
CVE-2026-114638
A flaw was found in Traefik. When using the Kubernetes Ingress NGINX provider, client certificate authority CA secret names can collide and be incorrectly merged during name normalization. A remote attacker holding a certificate issued for a different service can exploit this flaw to bypass...