VDB

CVE-2026-53622

CVE-2026-53622 PUBLISHED CVSS 7.800000190734863 HIGH

Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts

EPSS 0.63% · 47.9th percentile

Risk Scores

CVSS 4.0
7.800000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
EPSS Score
0.63%
47.9th percentile

Affected Products

VendorProductVersions
alpinetraefik0, 0, 0
github.comtraefik/traefik/v20, 0, 0
wolfitraefik-3.6*, *, *
Red HatRed Hat OpenShift Dev Spaces
chainguardtraefik-3.6*, *, *
Red HatRed Hat OpenShift Dev Spaces 3.301787756799, 1787756799, 1787756799
chainguardtraefik-fips-2.110, 0, 0
traefiktraefik< 2.11.51, < 3.7.3, < 3.7.3
Red HatRed Hat OpenShift Dev Spaces
github.comtraefik/traefik0, 0, 0
chainguardtraefik-fips-3.6*, *
github.comtraefik/traefik/v33.7.0, 0, 3.7.0
chainguardtraefik-2.110, 0, 0

Timeline

  • Jun 5, 2026 CVE Published
  • Jun 19, 2026 Security Advisory
  • Aug 7, 2026 EPSS Score
  • Aug 24, 2026 EPSS Score
  • Aug 26, 2026 EPSS Score
  • Aug 30, 2026 EPSS Score
  • Sep 2, 2026 EPSS Score
  • Sep 2, 2026 CVE Updated
  • Sep 2, 2026 Distribution Patch
  • Sep 3, 2026 EPSS Score
  • Sep 5, 2026 EPSS Score
  • Sep 6, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›