onyx --cves cve-2022-23632

CVE-2022-23632

score: <0.1
cvss: 7.4
epss: 1.7%
published: 2022-02-17
kev added: —
first seen: 2026-10-21

Traefik prior to version 2.6.1 contains a TLS configuration mismatch caused by handling of FQDN host headers, letting attackers potentially use incorrect TLS settings, exploit requires sending requests with FQDN host headers.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2022-02-17 Published
2026-10-21 Tracked by Onyx

Weaknesses

CWE-295

References 4

https://www.oracle.com/security-alerts/cpujul2022.html
https://github.com/traefik/traefik/pull/8764
https://github.com/traefik/traefik/releases/tag/v2.6.1
https://github.com/traefik/traefik/security/advisories/GHSA-hrhx-6h34-j5hc