# CERT-FR Flags Traefik DoS Vulnerability

Published: 2026-11-02 · Severity: routine · Sectors: Technology · Not tied to an actor or CVE
Canonical: https://vorant.io/reports/aa9852ea-f55b-56d6-81c9-b91e3922f10f/cert-fr-flags-traefik-dos-vulnerability
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> A remote denial-of-service flaw in Traefik affects versions before 2.11.61 and 3.7.17; patches are available.

Source: cert.cyber.gouv.fr — https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1439

## What to check

- Applies to: Not tied to a specific actor, malware or CVE, only to the sectors it covers, so it may be general reporting. Check the source before acting on it. Whether it concerns you is not assessed.

CERT-FR published an advisory describing a denial-of-service vulnerability affecting Traefik, a widely used reverse proxy and load balancer. The flaw impacts Traefik 2.x versions prior to 2.11.61 and 3.x versions prior to 3.7.17, allowing a remote attacker to disrupt service availability. The advisory does not indicate active exploitation in the wild.

Defenders running Traefik should consult the vendor's GitHub security advisory (GHSA-xv5x-242w-7hf7) and upgrade to the patched versions (2.11.61 or 3.7.17 and later) as soon as feasible. No CVE identifier was provided in this bulletin; organizations should track the GHSA reference for patch management and verification purposes.

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1439

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/aa9852ea-f55b-56d6-81c9-b91e3922f10f/cert-fr-flags-traefik-dos-vulnerability.
The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup