Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-65602 · Microsoft / collected KEV context

EUVD-2026-47646

GHSA-7m3p-wc52-rmc6

GHSA-42cj-m3vj-89wv

GO-2026-6192

cve-program · CVE-2026-65602

• https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv
• https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0
• https://www.vulncheck.com/advisories/traefik-before-ingressroutetcp-serverstransport-namespace-bypass

euvd · EUVD-2026-47646

• https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv
• https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0
• https://www.vulncheck.com/advisories/traefik-before-ingressroutetcp-serverstransport-namespace-bypass

nvd · CVE-2026-65602

• https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0
• https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv
• https://www.vulncheck.com/advisories/traefik-before-ingressroutetcp-serverstransport-namespace-bypass

osv · GHSA-42cj-m3vj-89wv

• https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv
• https://nvd.nist.gov/vuln/detail/CVE-2026-65602
• https://github.com/traefik/traefik/pull/13458
• https://github.com/traefik/traefik/commit/67501cbe7bc7774e26ecbd1c29af97f098e14b0b
• https://github.com/traefik/traefik
• https://github.com/traefik/traefik/releases/tag/v3.6.23
• https://github.com/traefik/traefik/releases/tag/v3.7.7
• https://www.vulncheck.com/advisories/traefik-before-ingressroutetcp-serverstransport-namespace-bypass

osv · GHSA-7m3p-wc52-rmc6

• https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv
• https://nvd.nist.gov/vuln/detail/CVE-2026-65602
• https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0
• https://www.vulncheck.com/advisories/traefik-before-ingressroutetcp-serverstransport-namespace-bypass

osv · GO-2026-6192

• https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv
• https://nvd.nist.gov/vuln/detail/CVE-2026-65602
• https://github.com/traefik/traefik/commit/67501cbe7bc7774e26ecbd1c29af97f098e14b0b
• https://github.com/traefik/traefik/pull/13458
• https://github.com/traefik/traefik/releases/tag/v3.6.23
• https://github.com/traefik/traefik/releases/tag/v3.7.7
• https://www.vulncheck.com/advisories/traefik-before-ingressroutetcp-serverstransport-namespace-bypass

No related operational record is retained in the current change model.