CVE-2026-54761-poc

CVE-2026-54761: Traefik Kubernetes Gateway crossProviderNamespaces Bypass PoC Versione in inglese Panoramica Questo repository è un Proof of Concept PoC per riprodurre in ambiente locale la vulnerabilità ad alta gravità CVE-2026-54761 presente nel provider Kubernetes Gateway di Traefik. Questa...

CVE-2026-65602

Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTCP service serversTransport references the allowlist was only enforced for HTTP serversTransport references. A low-privileged Kubernetes user in a namespace not listed in...

CVE-2026-65602 Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass

Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTCP service serversTransport references the allowlist was only enforced for HTTP serversTransport references. A low-privileged Kubernetes user in a namespace not listed in...