CVE WATCH / VULNERABILITY DETAIL
CVE-2026-112778
UNKNOWNCVSS 0NVD feed
Published 19 October 2026 · tracked since 20 October 2026
Description
Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress provider, allowing references to Middlewares, ServersTransports, and TLSOptions in other namespaces. Attackers able to create or update Ingress or Service reso
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog