Traefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionRef

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-65601 · Microsoft / collected KEV context

EUVD-2026-47645

GHSA-6mxq-jr92-3h2r

GHSA-qq9q-x9w4-chhj

GO-2026-6198

cve-program · CVE-2026-65601

• https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj
• https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0
• https://www.vulncheck.com/advisories/traefik-before-namespace-confusion-via-httproute-extensionref

euvd · EUVD-2026-47645

• https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj
• https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0
• https://www.vulncheck.com/advisories/traefik-before-namespace-confusion-via-httproute-extensionref

nvd · CVE-2026-65601

• https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0
• https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj
• https://www.vulncheck.com/advisories/traefik-before-namespace-confusion-via-httproute-extensionref

osv · GHSA-6mxq-jr92-3h2r

• https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj
• https://nvd.nist.gov/vuln/detail/CVE-2026-65601
• https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0
• https://www.vulncheck.com/advisories/traefik-before-namespace-confusion-via-httproute-extensionref

osv · GHSA-qq9q-x9w4-chhj

• https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj
• https://nvd.nist.gov/vuln/detail/CVE-2026-65601
• https://github.com/traefik/traefik/pull/13462
• https://github.com/traefik/traefik/commit/655d6324ab4a1475892a958d4bae389720a67ea9
• https://github.com/traefik/traefik
• https://www.vulncheck.com/advisories/traefik-before-namespace-confusion-via-httproute-extensionref

osv · GO-2026-6198

• https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj
• https://nvd.nist.gov/vuln/detail/CVE-2026-65601
• https://github.com/traefik/traefik/commit/655d6324ab4a1475892a958d4bae389720a67ea9
• https://github.com/traefik/traefik/pull/13462
• https://www.vulncheck.com/advisories/traefik-before-namespace-confusion-via-httproute-extensionref

No related operational record is retained in the current change model.