Zero Radar
← feed
HighVulnerabilityCVE-2026-119572updated 30 Oct 2026, 14:17 UTC

Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX provider…

Official source
SeverityHighCVSS 7 of 10
Being exploited?UnclearNo reports either way yet
Fix available?UnclearNo fixed version published in the sources yet
How sure is this?Official sourceBacked by an official source

Timeline

  1. 30 Oct 2026, 14:16 UTC
    Publicly disclosed
  2. 30 Oct 2026, 14:16 UTC
    Reported by NVD · NVD
  3. 30 Oct 2026, 14:17 UTC
    Picked up by Zero Radar

Sources 1 report, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
CVE-2026-119572
CVSS
7 / 10
Disclosed
30 Oct 2026, 14:16 UTC
On Zero Radar
30 Oct 2026, 14:17 UTC (1 min after disclosure)
Last change
30 Oct 2026, 14:17 UTC

This entry has not been explained yet. The text comes straight from the source. How Zero Radar works

Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX provider… · Zero Radar