CVE-2026-114635 — Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme
Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unauthenticated clients can…
Published: 2026-10-22 · CVSS: 7.0 · CVSS 4.0
Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unauthenticated clients can send HTTP/2 requests with the :scheme http pseudo-header over TLS on Go 1.27 builds to reach routers requiring client certificates without presenting one.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7