VDB
CVE-2026-29777
CVE-2026-29777
PUBLISHED
CVSS 6.099999904632568 MEDIUM
De multiples vulnérabilités ont été découvertes dans Traefik. Elles permettent à un attaquant de provoquer un déni de service à distance et un contournement de la politique de sécurité.
EPSS 0.02% · 4.6th percentile
Risk Scores
CVSS 4.0
6.099999904632568
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS Score
0.02%
4.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| traefik | traefik | < 3.6.10, 0 |
| github.com | traefik/traefik | 0 |
| github.com | traefik/traefik/v3 | 0 |
| Go standard library | crypto/tls | 1.25.0-0, 1.26.0-rc.1, 0 |
| github.com | traefik/traefik/v2 | 0 |
| Traefik | Traefik |
Exploit Intelligence
- CIRCL seen: CVE-2025-68121 (circl-sighting)
- CIRCL seen: CVE-2025-68121 (circl-sighting)
- CIRCL seen: CVE-2025-68121 (circl-sighting)
- CIRCL seen: CVE-2025-68121 (circl-sighting)
- CIRCL seen: CVE-2025-68121 (circl-sighting)
- CIRCL seen: CVE-2025-68121 (circl-sighting)
- CIRCL seen: CVE-2025-68121 (circl-sighting)
- CIRCL seen: CVE-2025-68121 (circl-sighting)
- CIRCL seen: CVE-2025-68121 (circl-sighting)
- CIRCL seen: CVE-2025-68121 (circl-sighting)
…and 300 more exploits
Timeline
- Oct 5, 2023 PoC Published
- Apr 28, 2025 PoC Published
- Oct 11, 2025 PoC Published
- Oct 12, 2025 PoC Published
- Oct 16, 2025 PoC Published
- Oct 17, 2025 PoC Published
- Oct 17, 2025 PoC Published
- Oct 21, 2025 PoC Published
- Oct 24, 2025 PoC Published
- Oct 24, 2025 PoC Published
- Oct 24, 2025 PoC Published
- Oct 24, 2025 PoC Published
References
- https://github.com/traefik/traefik/security/advisories/GHSA-8q2w-wr49-whqj url
- https://github.com/traefik/traefik/releases/tag/v3.6.10 url
- https://nvd.nist.gov/vuln/detail/CVE-2026-29777 advisory
- https://github.com/traefik/traefik package
- https://github.com/traefik/traefik/security/advisories/GHSA-gv8r-9rw9-9697 advisory
- https://github.com/traefik/traefik/security/advisories/GHSA-4hjq-9h5c-252j advisory
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk url
- https://go.dev/cl/737700 url
- https://go.dev/issue/77217 url
- https://pkg.go.dev/vuln/GO-2026-4337 url