CVE-2026-88008 | Traefik up to 2.11.56/3.7.12 HTTP/2 Upgrade access control

September 10, 2026 Yanac

A vulnerability identified as critical has been detected in Traefik up to 2.11.56/3.7.12. Affected by this issue is some unknown functionality of the component HTTP2 Upgrade Handler. Performing a manipulation results in improper access controls.

This vulnerability is reported as CVE-2026-88008. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More