Hunt-Benito/traefik-stripprefix-auth-bypass-cve-2026-48020-path-normalization

PoC

Hunt-Benito/traefik-stripprefix-auth-bypass-cve-2026-48020-path-normalization

view exploit source poc_in_githubauthor Hunt-Benitopublished 2026-06-27catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-48020UScritical10.0OT highExploit
Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middleware that allows an u…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan