Most recent entries from all

CERTFR-2026-AVI-0163 — De multiples vulnérabilités ont été découvertes dans HAProxy. Elles permettent à un attaquant de provoquer un déni de s…

CERTFR-2026-AVI-0163

BIT-haproxy-2026-26081

Affected: Bitnami: haproxy

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.

fkie_cve-2026-26081

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.

GHSA-c8q6-qrfh-727c

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.

msrc_CVE-2026-26081 — HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterpris…

msrc_CVE-2026-26081

OESA-2026-3229 — haproxy security update

Affected: openEuler:24.03-LTS-SP3: haproxy

HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world&apos;s most visited ones. Security Fix(es):

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.(CVE-2026-26081)

openSUSE-SU-2026:10187-1 — haproxy-3.3.3+git0.465d8e2fc-1.1 on GA media

haproxy-3.3.3+git0.465d8e2fc-1.1 on GA media

RHSA-2026:40938 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

haproxy: HAProxy: Denial of Service due to mishandled varint haproxy: HAProxy: Data integrity and availability vulnerability in NEW_TOKEN format

SUSE-SU-2026:20557-1 — Security update for haproxy

Security update for haproxy

UBUNTU-CVE-2026-26081

Affected: Ubuntu:25.10: haproxy

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.

WID-SEC-W-2026-0410 — HAProxy Enterprise, Community und ALOHA (QUIC): Mehrere Schwachstellen ermöglichen Denial of Service

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HAProxy Enterprise, Community und ALOHA ausnutzen, um einen Denial of Service Angriff durchzuführen.