CVE-2026-26998

score

<0.1

cvss

4.4

epss

0.6%

published

2026-03-05

kev added

—

first seen

2026-10-21

Traefik < 2.11.38 and < 3.6.9 contains a denial of service caused by unbounded memory allocation in ForwardAuth middleware response handling, letting attackers crash the process via large auth server responses, exploit requires no special privileges.