Lucene search
+L

7 matches found

OSV
OSV
added 2026/08/06 4:38 p.m.20 views

GHSA-FGJJ-PX3W-67XX Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

Summary There is a high severity vulnerability in Traefik's Kubernetes Gateway API provider. Router and service identities for HTTPRoute, GRPCRoute, TCPRoute and TLSRoute objects were built by hyphen-concatenating the route namespace, the route name, the Gateway identity, the entry point and the...

8.2CVSS5.6AI score0.00364EPSS
SaveExploits1References6
EUVD
EUVD
added 2026/08/05 9:49 p.m.16 views

EUVD-2026-47645

Traefik Gateway API HTTPRoute BackendRef ExtensionRef Namespace Confusion...

5.3CVSS5.4AI score0.0029EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
added 2026/06/23 7:15 p.m.19 views

CVE-2026-54761

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.21 and 3.7.5, there is a high severity vulnerability in Traefik's Kubernetes Gateway provider affecting the crossProviderNamespaces allowlist. For HTTPRoute rules that declare multiple WRR backendRefs, Traefik evaluates the allowlis...

7.1CVSS5.8AI score0.00369EPSS
SaveExploits2References3
Snyk
Snyk
added 2026/06/17 2:01 p.m.9 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the evaluation of the crossProviderNamespaces allowlist within the Kubernetes Gateway provider. An attacker can gain unauthorized access to internal services by creating an HTTPRoute in a non-allow-listed...

7.1CVSS5.8AI score0.00369EPSS
SaveExploits2References3
NVD
NVD
added 2026/05/15 5:16 p.m.18 views

CVE-2026-44774

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.46, 3.6.17, and 3.7.1, Traefik's Kubernetes Gateway API provider allows a tenant with HTTPRoute creation permissions to expose the REST provider handler, bypassing the providers.rest.insecure=false setting. The Gateway provider...

9.9CVSS0.00468EPSS
SaveExploits1References8
CVE
CVE
added 2026/05/15 4:30 p.m.128 views

CVE-2026-44774

CVE-2026-44774 - Traefik Gateway API exposure vulnerability Affected: Traefik v2.x before 2.11.46, v3.x before 3.6.17 and 3.7.1. Issue: In the Kubernetes Gateway API provider, a tenant with HTTPRoute creation rights can expose the REST provider handler by abusing TraefikService backend references...

9.9CVSS5.8AI score0.00468EPSS
SaveExploits1References8Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.24 views

Joomla MySMS Component (com_mysms) Upload Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla commysms Upload Vulnerability Date : july 10,2010 Critical Level : HIGH vendor URL :http://www.willcodejoomlaforfood.de/...

7.1AI score
SaveExploits0
Rows per page
Query Builder