<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: traefik</title><description>Every new CVE for traefik.</description><link>https://agentprime.io/</link><item><title>CVE-2026-121966: Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak</title><link>https://agentprime.io/advisories/CVE-2026-121966/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-121966/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Nov 2026 15:33:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-119574: Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Service</title><link>https://agentprime.io/advisories/CVE-2026-119574/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119574/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 13:18:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-119573: Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secret</title><link>https://agentprime.io/advisories/CVE-2026-119573/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119573/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 13:18:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-119572: Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider</title><link>https://agentprime.io/advisories/CVE-2026-119572/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119572/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 13:18:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114656: Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher</title><link>https://agentprime.io/advisories/CVE-2026-114656/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114656/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:43:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114642: Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper</title><link>https://agentprime.io/advisories/CVE-2026-114642/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114642/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:43:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114641: Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper</title><link>https://agentprime.io/advisories/CVE-2026-114641/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114641/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:43:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114640: Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router</title><link>https://agentprime.io/advisories/CVE-2026-114640/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114640/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:43:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114639: Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool</title><link>https://agentprime.io/advisories/CVE-2026-114639/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114639/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:43:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114638: Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision</title><link>https://agentprime.io/advisories/CVE-2026-114638/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114638/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:43:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114637: Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak</title><link>https://agentprime.io/advisories/CVE-2026-114637/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114637/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:43:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114636: Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router</title><link>https://agentprime.io/advisories/CVE-2026-114636/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114636/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:43:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114635: Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme</title><link>https://agentprime.io/advisories/CVE-2026-114635/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114635/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:43:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-112778: Traefik before 2.11.46, 3.6.17, and 3.7.1 Cross-Namespace Resource Reference via Kubernetes Annotations</title><link>https://agentprime.io/advisories/CVE-2026-112778/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-112778/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Oct 2026 19:10:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-88877: Traefik v3.7.0 Authentication Bypass via from-to-www-redirect</title><link>https://agentprime.io/advisories/CVE-2026-88877/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88877/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 13:05:29 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-85597: Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict</title><link>https://agentprime.io/advisories/CVE-2026-85597/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85597/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 11:30:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85596: Traefik v3.7 Authentication Bypass via TLS Option Conflict</title><link>https://agentprime.io/advisories/CVE-2026-85596/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85596/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 11:30:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85595: Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth</title><link>https://agentprime.io/advisories/CVE-2026-85595/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85595/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 11:29:59 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-85594: Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middleware</title><link>https://agentprime.io/advisories/CVE-2026-85594/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85594/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 11:29:58 GMT</pubDate><category>CVE</category></item></channel></rss>