THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-85597 — Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected bac

[NVD] CVE-2026-85597 — Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected bac

mednvdPublished 2026-09-04

CVE-2026-85597 CVSS: None Published: 2026-09-04T12:17:23.210

Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiting shared TLS resolution across multiple

Indicators of compromise

CVE-2026-85597cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-85597