CVE-2026-121966 - Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak
CVE ID :CVE-2026-121966 Published : Nov. 4, 2026, 4:17 p.m. | 47 minutes ago Description :Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requests) through an auth-server connection pool shared by all clients, exposing...