[ Vendor · 4 CVEs ]

HAProxy

CVEs affecting HAProxy published in the last 30 days, plus any HAProxy CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-110353 22 Oct 2026 CVSS 7.5 HAProxyHAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2…
CVE-2026-110353 22 Oct 2026 CVSS 7.5 HAProxyHAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2…
CVE-2026-110354 22 Oct 2026 CVSS 7.5 HAProxyHAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an…
CVE-2026-109575 12 Oct 2026 CVSS 9.8 HAProxy Data Plane API EEIn HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global…