CVE-2026-25949 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unauthenticated…
High CVSS: 7.5

CVE-2026-25949

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unauthenticated client can bypass Traefik entrypoint respondingTimeouts.readTimeout by sending the 8-byte Postgres SSLRequest (STARTTLS) prelude and then stalling, causing connections to remain open indefinitely, leading to a denial of service. This vulnerability is fixed in 3.6.8.
Vendor
Traefik
Product
Traefik
CWE
CWE-400
Yayın Tarihi
2026-02-12 20:16:11
Güncelleme
2026-02-20 18:44:41
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-400 Traefik HIGH Traefik 2026

Referanslar

https://github.com/traefik/traefik/commit/31e566e9f1d7888ccb6fbc18bfed427203c35678 https://github.com/traefik/traefik/releases/tag/v3.6.8 https://github.com/traefik/traefik/security/advisories/GHSA-89p3-4642-cr2w