onyx

onyx --cves cve-2026-22045

CVE-2026-22045

MEDTraefik
score
<0.1
cvss
5.9
epss
0.3%
published
2026-01-15
kev added
—
first seen

Traefik < 2.11.35 and < 3.6.7 contain a denial of service vulnerability caused by ACME TLS-ALPN fast path allowing unauthenticated clients to tie up goroutines and file descriptors, letting attackers exhaust resources, exploit requires ACME TLS challenge enabled.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2026-01-15 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 0.3%2026-09-23: epss 0.3%2026-09-24: epss 0.3%2026-09-25: epss 0.3%2026-09-26: epss 0.3%2026-09-27: epss 0.3%2026-09-29: epss 0.3%2026-09-30: epss 0.3%2026-10-01: epss 0.3%2026-10-02: epss 0.3%2026-10-03: epss 0.3%2026-10-04: epss 0.3%2026-10-05: epss 0.3%2026-10-06: epss 0.3%2026-10-07: epss 0.3%2026-10-08: epss 0.3%2026-10-09: epss 0.3%2026-10-10: epss 0.3%2026-10-11: epss 0.3%2026-10-12: epss 0.3%2026-10-13: epss 0.3%2026-10-14: epss 0.3%2026-10-15: epss 0.3%2026-10-16: epss 0.3%2026-10-18: epss 0.3%2026-10-19: epss 0.3%2026-10-20: epss 0.3%2026-10-21: epss 0.3%0.3%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-770

References 4