Vulnerabilities
Report: CVE-2026-35051 - Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix
CVE ID :CVE-2026-35051 Published : April 30, 2026, 8:26 p.m. | 54 minutes ago Description :Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerability in Traefik's ForwardAuth middleware when trustForwardHeader=false is configured and Traefik is deployed behind a trusted upstream proxy. This issue has been patched in versions 2.11.43, 3.6.14, and 3.7.0-rc.2. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...