Known vulnerabilities in Traefik

Vendor: Containous
Software: Traefik
Software CPE: cpe:2.3:a:containous:traefik:*:*:*:*:*:*:*:*
Total vulnerabilities: 74
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Traefik Traefik is affected by 74 known vulnerabilities: 17 high, 37 medium, 20 low Critical High Medium Low

Vulnerabilities (74)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146000 - Authentication Bypass by Spoofing
CVE-2026-88011
CWE-290 Low
No
No
2.11.56, 3.7.12 27.08.2026 SB20260827144
#VU145999 - Allocation of Resources Without Limits or Throttling
CVE-2026-88012
CWE-770 Medium
No
No
2.11.56, 3.7.12 27.08.2026 SB20260827144
#VU145998 - Improper Access Control
CVE-2026-88877
CWE-284 High
No
No
3.7.12 27.08.2026 SB20260827144
#VU144552 - Improper Access Control
CVE-2026-85597
CWE-284 Medium
No
No
2.11.55, 3.7.11 21.08.2026 SB2026082157
#VU144551 - Improper Authentication
CVE-2026-85596
CWE-287 Medium
No
No
3.7.11 21.08.2026 SB2026082157
#VU144550 - Incorrect Implementation of Authentication Algorithm
CVE-2026-85595
CWE-303 High
No
No
2.11.55, 3.7.11 21.08.2026 SB2026082157
#VU144549 - Improper Access Control
CVE-2026-85594
CWE-284 Low
No
No
3.7.11 21.08.2026 SB2026082157
#VU144546 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-71324
CWE-444 High
No
No
2.11.53, 3.6.24, 3.7.9 21.08.2026 SB2026082156
#VU144545 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-67309
CWE-22 High
No
No
3.7.8 21.08.2026 SB2026082155
#VU137268 - Incorrect Authorization
CVE-2026-65602
CWE-863 Low
No
No
3.6.23, 3.7.7 09.07.2026 SB2026070936
#VU137267 - Incorrect Authorization
CVE-2026-65601
CWE-863 Low
No
No
3.7.7 09.07.2026 SB2026070936
#VU137266 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-65600
CWE-22 Medium
No
No
2.11.52, 3.6.23, 3.7.7 09.07.2026 SB2026070936
#VU136877 - Improper Handling of Case Sensitivity
CVE-2026-54763
CWE-178 High
No
No
2.11.51, 3.6.22, 3.7.6 03.07.2026 SB2026070352
SB2026081241
#VU136876 - Insufficient Verification of Data Authenticity
CVE-2026-54764
CWE-345 Medium
No
No
2.11.51, 3.6.22, 3.7.6 03.07.2026 SB2026070352
#VU136875 - Incorrect Authorization
CVE-2026-54765
CWE-863 Low
No
No
3.7.6 03.07.2026 SB2026070352
#VU136874 - Not Failing Securely (\'Failing Open\')
CVE-2026-54762
CWE-636 Medium
No
No
3.7.5 03.07.2026 SB2026070351
#VU136873 - Improper Access Control
CVE-2026-54761
CWE-284 Low
No
No
3.6.21, 3.7.5 03.07.2026 SB2026070351
#VU136872 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-53622
CWE-288 High
No
No
3.6.18, 3.7.3 03.07.2026 SB2026070350
#VU136871 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-48491
CWE-288 High
No
No
3.7.3 03.07.2026 SB2026070350
#VU136870 - Incorrect Authorization
CVE-2026-48020
CWE-863 High
No
No
2.11.48, 3.6.19, 3.7.3 03.07.2026 SB2026070350


Showing elements 1 - 20 out of 74