{"schema_version":1,"title":"Traefik Labs Traefik vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 8 vulnerabilities in Traefik Labs Traefik: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-119573, was published on 30 October 2026. 7 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/traefik-labs-traefik","json_url":"https://junglewise.ai/threats/technologies/traefik-labs-traefik.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/traefik-labs-traefik","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":7,"all_time":8,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":7,"last_90_days":7,"last_365_days":8},"latest":[{"cve":"CVE-2026-119573","cvss":4.4,"slug":"cve-2026-119573-traefik-3-7-11-before-3-7-15-contains-an-authorization-bypass-in","title":"Traefik authorization bypass in Kubernetes Ingress NGINX provider","severity":"medium","exploited":false,"published_at":"2026-10-30T14:16:46.267+00:00","url":"https://junglewise.ai/threats/cve-2026-119573-traefik-3-7-11-before-3-7-15-contains-an-authorization-bypass-in"},{"cve":"CVE-2026-119572","cvss":8.7,"slug":"cve-2026-119572-traefik-from-3-7-0-ea-1-before-3-7-15-contains-an-authentication","title":"Traefik ingress-nginx provider mTLS authentication bypass","severity":"high","exploited":false,"published_at":"2026-10-30T14:16:46.07+00:00","url":"https://junglewise.ai/threats/cve-2026-119572-traefik-from-3-7-0-ea-1-before-3-7-15-contains-an-authentication"},{"cve":"CVE-2026-114640","cvss":8.7,"slug":"cve-2026-114640-traefik-from-v3-7-0-before-v3-7-14-contains-an-authentication","title":"Traefik Ingress-NGINX mTLS identity spoofing via forged headers","severity":"high","exploited":false,"published_at":"2026-10-22T02:16:56.947+00:00","url":"https://junglewise.ai/threats/cve-2026-114640-traefik-from-v3-7-0-before-v3-7-14-contains-an-authentication"},{"cve":"CVE-2026-114638","cvss":8.7,"slug":"cve-2026-114638-traefik-v3-7-0-before-v3-7-14-contains-an-improper","title":"Traefik Kubernetes Ingress NGINX provider authentication bypass via TLS secret name collision","severity":"high","exploited":false,"published_at":"2026-10-22T02:16:56.653+00:00","url":"https://junglewise.ai/threats/cve-2026-114638-traefik-v3-7-0-before-v3-7-14-contains-an-improper"},{"cve":"CVE-2026-114637","cvss":8.7,"slug":"cve-2026-114637-traefik-from-v3-2-0-before-v3-7-14-contains-an-authentication","title":"Traefik FastProxy NTLM/Negotiate authentication bypass in connection pool","severity":"high","exploited":false,"published_at":"2026-10-22T02:16:56.503+00:00","url":"https://junglewise.ai/threats/cve-2026-114637-traefik-from-v3-2-0-before-v3-7-14-contains-an-authentication"},{"cve":"CVE-2026-114636","cvss":8.7,"slug":"cve-2026-114636-traefik-v3-7-13-before-v3-7-14-contains-an-access-control-bypass","title":"Traefik Kubernetes Ingress NGINX provider access-control bypass in ssl-passthrough","severity":"high","exploited":false,"published_at":"2026-10-22T02:16:56.31+00:00","url":"https://junglewise.ai/threats/cve-2026-114636-traefik-v3-7-13-before-v3-7-14-contains-an-access-control-bypass"},{"cve":"CVE-2026-114635","cvss":8.7,"slug":"cve-2026-114635-traefik-before-v2-11-58-and-v3-7-14-contains-an-authentication","title":"Traefik authentication bypass in SNI check via HTTP/2","severity":"high","exploited":false,"published_at":"2026-10-22T02:16:56.14+00:00","url":"https://junglewise.ai/threats/cve-2026-114635-traefik-before-v2-11-58-and-v3-7-14-contains-an-authentication"},{"cve":"CVE-2026-33433","cvss":8.8,"epss":0.0049,"slug":"cve-2026-33433-traefik-identity-spoofing-via-non-canonical-headerfield-in-auth","title":"Traefik identity spoofing via non-canonical headerField in Auth middleware","severity":"high","exploited":false,"published_at":"2026-03-27T15:16:54.98+00:00","url":"https://junglewise.ai/threats/cve-2026-33433-traefik-identity-spoofing-via-non-canonical-headerfield-in-auth"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Traefik Labs Traefik Proxy","slug":"traefik-proxy","vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/traefik-proxy"}],"technology":{"hub":true,"name":"Traefik Labs Traefik","slug":"traefik-labs-traefik","vendor":{"hub":true,"name":"Traefik Labs","slug":"traefik-labs","url":"https://junglewise.ai/threats/vendors/traefik-labs"},"aliases":[],"category":"reverse-proxy","description":"Open-source reverse proxy and load balancer supporting dynamic configuration and multiple protocols.","url":"https://junglewise.ai/threats/technologies/traefik-labs-traefik"},"most_severe":[{"cve":"CVE-2026-33433","cvss":8.8,"epss":0.0049,"slug":"cve-2026-33433-traefik-identity-spoofing-via-non-canonical-headerfield-in-auth","title":"Traefik identity spoofing via non-canonical headerField in Auth middleware","severity":"high","exploited":false,"published_at":"2026-03-27T15:16:54.98+00:00","url":"https://junglewise.ai/threats/cve-2026-33433-traefik-identity-spoofing-via-non-canonical-headerfield-in-auth"},{"cve":"CVE-2026-119572","cvss":8.7,"slug":"cve-2026-119572-traefik-from-3-7-0-ea-1-before-3-7-15-contains-an-authentication","title":"Traefik ingress-nginx provider mTLS authentication bypass","severity":"high","exploited":false,"published_at":"2026-10-30T14:16:46.07+00:00","url":"https://junglewise.ai/threats/cve-2026-119572-traefik-from-3-7-0-ea-1-before-3-7-15-contains-an-authentication"},{"cve":"CVE-2026-114640","cvss":8.7,"slug":"cve-2026-114640-traefik-from-v3-7-0-before-v3-7-14-contains-an-authentication","title":"Traefik Ingress-NGINX mTLS identity spoofing via forged headers","severity":"high","exploited":false,"published_at":"2026-10-22T02:16:56.947+00:00","url":"https://junglewise.ai/threats/cve-2026-114640-traefik-from-v3-7-0-before-v3-7-14-contains-an-authentication"},{"cve":"CVE-2026-114638","cvss":8.7,"slug":"cve-2026-114638-traefik-v3-7-0-before-v3-7-14-contains-an-improper","title":"Traefik Kubernetes Ingress NGINX provider authentication bypass via TLS secret name collision","severity":"high","exploited":false,"published_at":"2026-10-22T02:16:56.653+00:00","url":"https://junglewise.ai/threats/cve-2026-114638-traefik-v3-7-0-before-v3-7-14-contains-an-improper"},{"cve":"CVE-2026-114637","cvss":8.7,"slug":"cve-2026-114637-traefik-from-v3-2-0-before-v3-7-14-contains-an-authentication","title":"Traefik FastProxy NTLM/Negotiate authentication bypass in connection pool","severity":"high","exploited":false,"published_at":"2026-10-22T02:16:56.503+00:00","url":"https://junglewise.ai/threats/cve-2026-114637-traefik-from-v3-2-0-before-v3-7-14-contains-an-authentication"},{"cve":"CVE-2026-114636","cvss":8.7,"slug":"cve-2026-114636-traefik-v3-7-13-before-v3-7-14-contains-an-access-control-bypass","title":"Traefik Kubernetes Ingress NGINX provider access-control bypass in ssl-passthrough","severity":"high","exploited":false,"published_at":"2026-10-22T02:16:56.31+00:00","url":"https://junglewise.ai/threats/cve-2026-114636-traefik-v3-7-13-before-v3-7-14-contains-an-access-control-bypass"},{"cve":"CVE-2026-114635","cvss":8.7,"slug":"cve-2026-114635-traefik-before-v2-11-58-and-v3-7-14-contains-an-authentication","title":"Traefik authentication bypass in SNI check via HTTP/2","severity":"high","exploited":false,"published_at":"2026-10-22T02:16:56.14+00:00","url":"https://junglewise.ai/threats/cve-2026-114635-traefik-before-v2-11-58-and-v3-7-14-contains-an-authentication"},{"cve":"CVE-2026-119573","cvss":4.4,"slug":"cve-2026-119573-traefik-3-7-11-before-3-7-15-contains-an-authorization-bypass-in","title":"Traefik authorization bypass in Kubernetes Ingress NGINX provider","severity":"medium","exploited":false,"published_at":"2026-10-30T14:16:46.267+00:00","url":"https://junglewise.ai/threats/cve-2026-119573-traefik-3-7-11-before-3-7-15-contains-an-authorization-bypass-in"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}