CVE-2026-65600Published
Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path traversal in the ReplacePathRegex middleware. When ReplacePathRegex is configured with a regex that captures user-controll…
Exact source revision recorded 25 Oct 2026 15:18:45 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-65600
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.