Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-112778

Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress provider, allowing references to Middlewares, ServersTransports, and TLSOptions in other namespaces. Attackers able to create or update Ingress or Service resources in one namespace can set router.middlewares or service.serverstransport annotations to obtain another tenant's injected credentials or reuse its client certificates, bypassing namespace-based tenant isolation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 9.9%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-112778


Contact Us

Shodan ® - All rights reserved