https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T12:41:24.020966+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-114635 CVE-2026-114635 — Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme 2026-10-23T12:41:24.022516+00:00

Affected: traefik

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unauthenticated clients can send HTTP/2 requests with the :scheme http pseudo-header over TLS on Go 1.27 builds to reach routers requiring client certificates without presenting one.