vciy

CVE-2026-65600 · Brief

CVEs like CVE-2026-65600

The records whose text reads closest to CVE-2026-65600, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

  1. Traefik: StripPrefixRegex auth bypass via Path/RawPath desync

    Related weakness classes, CWE-706 is above CWE-22; same vendor or product family, traefik.

  2. Traefik has a possible vulnerability with the path matchers

    Same weakness class, CWE-22 (path traversal); same vendor or product family, traefik.

  3. Traefik allows path traversal using url encoding

    Same weakness class, CWE-22 (path traversal); same vendor or product family, traefik.

  4. Traefik doesn't Prevent Path Normalization Bypass in Router + Middleware Rules

    Same vendor or product family, traefik.

  5. Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is…

    Same vendor or product family, traefik.

  6. Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth

    Same vendor or product family, traefik.

  7. Traefik StripPrefix Route-Level Auth Bypass via Path Normalization

    Same vendor or product family, traefik.

  8. ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false

    Same vendor or product family, traefik.

  9. Traefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionRef

    Same vendor or product family, traefik.

  10. Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass

    Same weakness class, CWE-22 (path traversal); same vendor or product family, traefik.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-10-31.