Vulnerability in Traefik

CVE-2026-48491

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection (SNICheck) that allows an unauthenticated client to bypass mutual TLS enforced throu…

Affected products

  • Traefik — versions >= 3.7.0, < 3.7.3

Weakness classification (CWE)

References