CVE-2026-88877-PoC-pwnVader

CVE-2026-88877 — Traefik v3.7.0–v3.7.11 — 通过 from-to-www-redirect 实现的认证绕过 作者： pwnVader · 许可证： MIT（仓库根目录） | ---|--- 组件| Traefik（Kubernetes ingress-nginx provider，providers.kubernetesingressnginx） 类型| CWE-639 — 通过用户可控键实现的授权绕过 受影响版本| Traefik = v3.7.0, 披露状态。 该漏洞由 Traefik 项目公开披露，并已在 v3.7.12...

CVE-2026-85596: Improper Authentication

Traefik versions = v3.7.0 and = v3.7.10 contain an authentication bypass in the Kubernetes Ingress NGINX provider. The TLS option generated for an Ingress carrying the nginx.ingress.kubernetes.io/auth-tls-secret annotation was named after the Ingress namespace and name. As a result, two Ingress...

CVE-2025-66491: Improper Certificate Validation

Traefik is an HTTP reverse proxy and load balancer. Versions 3.5.0 through 3.6.2 have inverted TLS verification logic in the nginx.ingress.kubernetes.io/proxy-ssl-verify annotation. Setting the annotation to "on" intending to enable backend TLS certificate verification actually disables...

CVE-2023-5044: Improper Input Validation

Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation...