[CVE-2026-114635] Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check…

Descripción técnica

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unauthenticated clients can send HTTP/2 requests with the :scheme http pseudo-header over TLS on Go 1.27 builds to reach routers requiring client certificates without presenting one.

Puntuación CVSS

Score: 8.7/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Debilidades (CWE)

CWE-288

Fuente oficial

Publicado en NIST NVD.