{"schema":"threatline.record/2","record":{"id":"CVE-2026-114637","aliases":["GHSA-53qr-784g-cj35"],"summary":"Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak","details":"Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin NTLM/Negotiate-authenticated backend connections to their frontend connection. Unauthenticated clients can be handed a pooled keep-alive backend connection where a victim completed an NTLM or Negotiate handshake, letting them read victim data and act as that victim.","categories":["Unclassified"],"product":"traefik","vendor":"traefik","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-114637","source_modified_at":"2026-10-22T01:43:37.851Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"traefik","vendor":"traefik","versions":[{"version":"3.2.0","status":"affected","versionType":"semver","lessThan":"3.7.14"},{"version":"3.7.14","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-114637","source_modified_at":"2026-10-22T01:43:37.851Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"traefik","ecosystem":null},"version":"3.7.14","basis":"first unaffected version stated in the CVE record"}],"cvss":7,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00299,"percentile":0.21489,"score_date":"2026-10-23"},"published_at":"2026-10-22T01:43:37.851Z","modified_at":"2026-10-22T01:43:37.851Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-114637","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-22T01:43:37.851Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114637","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/traefik/traefik/security/advisories/GHSA-53qr-784g-cj35","tags":["vendor-advisory"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/traefik-3.2.0-before-3.7.14-fastproxy-ntlm-negotiate-connection-pool-identity-leak","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-22T01:43:37.851Z","content_hash":"8292297404908a3a68b44a9c4e3d2fc7e1bbd81c0fcbfca322ca751545e5a0c0"}}