Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerability in Traefik's ForwardAuth middleware when trustForwardHeader=false is configured and Traefik is deployed behind a trusted upstream proxy. This issue has been patched in versions 2.11.43, 3.6.14, and 3.7.0-rc.2.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-30 | 1 | Disclosure1 |
| 2026-05-01 | 2 | Disclosure1Patch1 |
| 2026-05-12 | 4 | Disclosure1General3 |
References CVE: CVE-2026-35051 CVSS: 10 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Severity: CRITICAL Status: Critical advisory
Post summary
The snippet provides basic advisory information for CVE-2026-35051, listing its CVSS and severity, but does not include PoC, exploit code, or mitigation details.
CVE: CVE-2026-35051 CVSS: 10 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Severity: CRITICAL Status: Critical advisory Traefik is an HTTP reverse proxy and load balancer.
Post summary
A critical vulnerability, CVE-2026-35051, has been disclosed for Traefik with a CVSS of 10; technical details are present, but no PoC, exploit, active exploitation, or patch information is included.
CRITICAL: CVE-2026-35051 (CVSS 10) — traefik traefik. CVE: CVE-2026-35051 CVSS: 10 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Severity: CRITICAL Status: Critical advisory
Post summary
A new critical vulnerability (CVE-2026-35051) affecting Traefik is disclosed with a CVSS score of 10, but no PoC, exploit, patch, or active exploitation information is provided.
Auth bypass in ForwardAuth middleware when deployed behind a trusted proxy. CVE-2026-35051, CVSS 10.0. Affects Traefik < 2.11.43, < 3.6.14, and < 3.7.0-rc.2. Update to 2.11.43, 3.6.14, or 3.7.0-rc.2. #InfoSec #Traefik
Post summary
The post announces CVE‑2026‑35051, describes an authentication bypass in Traefik’s ForwardAuth middleware, provides affected versions and CVSS score, and supplies clear upgrade guidance.
CVE-2026-35051 Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerability in Traefik's Fo… https://www.cve.org/CVERecord?id=CVE-2026-35051
Post summary
The post announces an authentication bypass vulnerability in Traefik versions prior to 2.11.43, 3.6.14, and 3.7.0‑rc.2, without any evidence of an exploit or remediation details.
https://lyrie.ai/research/research/cve-2026-35051-traefik-traefik #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The text references CVE‑2026‑35051 related to Traefik but provides no additional details, PoC, exploit, patch, or activity.
CVE-2026-35051 Authentication Bypass in Traefik ForwardAuth Middleware Prior to 2.11.43 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35051
Post summary
The text announces CVE‑2026‑35051, an authentication bypass affecting Traefik ForwardAuth Middleware prior to version 2.11.43, with a link to a vulnerability details page but no exploitation or patch information.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | traefik | traefik | - | - | - |
| App | traefik | traefik | 3.7.0 | - | - |
| App | traefik | traefik | 3.7.0 | - | - |
| App | traefik | traefik | 3.7.0 | - | - |
| App | traefik | traefik | 3.7.0 | - | - |