CVE-CVE-2026-88877
Severity
CRITICAL
CVSS Score
9.8
Description
Traefik is a HTTP reverse proxy and load balancer. In versions >= v3.7.0 and <= v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authentication annotation and the nginx.ingress.kubernetes.io/from-to-www-redirect annotation. For such Ingresses the provider creates an additional 'sibling' router that matches on the host alone, carries only the RedirectRegex middleware, and still points at the parent router's protected backend service. Because RedirectRegex is ...
PoCs for CVE-CVE-2026-88877
CVE-2026-88877-PoC-pwnVader
General
Shell
0
pwnVader
2026-09-22