Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 5

Количество 5

redhat логотип

CVE-2026-25949

9 месяцев назад

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unauthenticated client can bypass Traefik entrypoint respondingTimeouts.readTimeout by sending the 8-byte Postgres SSLRequest (STARTTLS) prelude and then stalling, causing connections to remain open indefinitely, leading to a denial of service. This vulnerability is fixed in 3.6.8.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2026-25949

9 месяцев назад

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unauthenticated client can bypass Traefik entrypoint respondingTimeouts.readTimeout by sending the 8-byte Postgres SSLRequest (STARTTLS) prelude and then stalling, causing connections to remain open indefinitely, leading to a denial of service. This vulnerability is fixed in 3.6.8.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2026-25949

9 месяцев назад

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, th ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-89p3-4642-cr2w

9 месяцев назад

Traefik: TCP readTimeout bypass via STARTTLS on Postgres

CVSS3: 7.5
EPSS: Низкий
altlinux логотип

ALT-PU-2026-3289

9 месяцев назад

ALT-PU-2026-3289: package `traefik` update to version 3.6.8-alt1

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2026-25949

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unauthenticated client can bypass Traefik entrypoint respondingTimeouts.readTimeout by sending the 8-byte Postgres SSLRequest (STARTTLS) prelude and then stalling, causing connections to remain open indefinitely, leading to a denial of service. This vulnerability is fixed in 3.6.8.

CVSS3: 7.5
1%
Низкий
9 месяцев назад
nvd логотип
CVE-2026-25949

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unauthenticated client can bypass Traefik entrypoint respondingTimeouts.readTimeout by sending the 8-byte Postgres SSLRequest (STARTTLS) prelude and then stalling, causing connections to remain open indefinitely, leading to a denial of service. This vulnerability is fixed in 3.6.8.

CVSS3: 7.5
1%
Низкий
9 месяцев назад
debian логотип
CVE-2026-25949

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, th ...

CVSS3: 7.5
1%
Низкий
9 месяцев назад
github логотип
GHSA-89p3-4642-cr2w

Traefik: TCP readTimeout bypass via STARTTLS on Postgres

CVSS3: 7.5
1%
Низкий
9 месяцев назад
altlinux логотип
ALT-PU-2026-3289

ALT-PU-2026-3289: package `traefik` update to version 3.6.8-alt1

CVSS3: 7.5
1%
Низкий
9 месяцев назад

Уязвимостей на страницу