T
Vendor security profile
traefik
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs41
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
41toplam CVE
Uncertain41 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
41Unknown
Latest vulnerabilities
6.3
5.3
5.3
CVE-2026-88011Traefik: ForwardAuth identity spoofing via dot-form header alias
Patch verifiedEPSS %0
7.0
CVE-2026-88008Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization
Patch verified Public Exploits:1EPSS %0
9.1
CVE-2026-88007Traefik HTTP/3 Backend NTLM Connection Reuse
Patch verifiedEPSS %1
7.0
CVE-2026-88004Traefik entrypoint header-name sanitization bypassed via request trailers
Patch verifiedEPSS %0
5.3
6.9