Logo
Retour à la veille

CVE-2026-71327

Publié : 6 août 2026
Modifié : 6 août 2026
Lien officiel NVD

Description détaillée

Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go builds HTTPRoute, GRPCRoute, TCPRoute, and TLSRoute router and service identities by hyphen-concatenating namespace, route name, Gateway identity, entry point, and rule index, allowing colliding Routes to overwrite another namespace's backend. This issue is fixed in 3.6.25 and 3.7.10.

Références et Patchs

https://github.com/traefik/traefik/commit/a764166656f0cd337f917ac76315c381cca844f9https://github.com/traefik/traefik/pull/13580https://github.com/traefik/traefik/releases/tag/v3.6.25https://github.com/traefik/traefik/releases/tag/v3.7.10https://github.com/traefik/traefik/security/advisories/GHSA-fgjj-px3w-67xx

Dernières Vulnérabilités

CVE-2026-70332

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

VOIR DÉTAILS

CVE-2026-68823

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

VOIR DÉTAILS

CVE-2026-65668

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

VOIR DÉTAILS