CVE-2026-114636

概要

参考情報

• traefik/traefik security advisory · Vendor Advisory
• vulncheck.com/advisories/traefik-3.7.13-authentication-bypass-via-ssl-passthrough-ingress-http-router · Third Party Advisory

traefik のその他の脆弱性

• CVE-2026-114642高 8.7Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connection slot not keyed b…
• CVE-2026-114641低 3.7Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend authentication, where…
• CVE-2026-114640高 8.7Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider that forwards cl…
• CVE-2026-114639高 8.7Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthenticated with an Aut…
• CVE-2026-114638高 8.7Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider that merges client …