HAProxy

Records43All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

HAProxy records in CISA KEV

No HAProxy vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Aloha · all components

TI-2026-21085 CVE-2026-26081 · GHSA-c8q6-qrfh-727c

LOW 23

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00476 Published 2026-07-20 Partial fix · 3.0.12, 3.1.14 +2 CWE-130

TI-2026-21084 CVE-2026-26080 · GHSA-fhrv-3q89-79q6

LOW 18

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00546 Published 2026-07-20 Fixed in 3.2.12, 3.3.3 CWE-252