# CERT-FR Flags Traefik Vulnerabilities

Published: 2026-10-16 · Severity: routine · Sectors: Technology, Infrastructure · Not tied to an actor or CVE
Canonical: https://vorant.io/reports/93fc69c5-90b3-59b2-9332-f409f92571cf/cert-fr-flags-traefik-vulnerabilities
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> CERT-FR advisory warns of multiple Traefik vulnerabilities before v3.7.15 enabling data confidentiality breaches and security policy bypass.

Source: cert.ssi.gouv.fr — https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1330

## What to check

- Applies to: Not tied to a specific actor, malware or CVE, only to the sectors it covers, so it may be general reporting. Check the source before acting on it. Whether it concerns you is not assessed.

CERT-FR issued an advisory covering multiple vulnerabilities in Traefik, a widely-used reverse proxy and load balancer, affecting all versions prior to v3.7.15. The vulnerabilities, documented in two GitHub security advisories (GHSA-28hp-c82p-8vqj and GHSA-p8wx-ph99-xgcr) published by Traefik on 16 October 2026, allow an attacker to compromise data confidentiality and bypass security policies enforced by the proxy.

No specific CVE identifiers were included in the CERT-FR bulletin text, and no indication of active in-the-wild exploitation is mentioned. Defenders running Traefik should consult the referenced GitHub security advisories for technical details and upgrade to version 3.7.15 or later to remediate the identified issues.

Given Traefik's role as an edge/ingress proxy for microservices and containerized environments, successful exploitation could expose backend service data or allow attackers to circumvent routing-level security controls, impacting the broader technology and infrastructure sectors.

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1330

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/93fc69c5-90b3-59b2-9332-f409f92571cf/cert-fr-flags-traefik-vulnerabilities.
The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup