Skip to content
Threat Feed
Subscribe

Product

Traefik (3.0.0 <= 3.7.13)

1 brief RSS
high advisory

Traefik: Access-control bypass in Kubernetes Ingress NGINX provider (CVE-2026-114636)

Traefik versions prior to 3.7.14 contain an access-control bypass vulnerability in the Kubernetes Ingress NGINX provider that allows unauthenticated access to backends protected by security annotations.

Traefik +3 ingress kubernetes access-control cve-2026-114636 authentication-bypass webserver
1t 3c