https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 07:25:15 +0000 https://db.gcve.eu/vuln/cve-2026-121966 <p><strong>Affected:</strong> traefik</p> <p>Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requests) through an auth-server connection pool shared by all clients, exposing connection-bound NTLM or Negotiate authentication. An unauthenticated attacker can reuse another user&#39;s authenticated connection, receiving the victim&#39;s identity via authResponseHeaders to access backends as that user.</p> <p><strong>Affected:</strong> traefik</p> <p>Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requests) through an auth-server connection pool shared by all clients, exposing connection-bound NTLM or Negotiate authentication. An unauthenticated attacker can reuse another user&#39;s authenticated connection, receiving the victim&#39;s identity via authResponseHeaders to access backends as that user.</p> https://db.gcve.eu/vuln/cve-2026-121966