← Back

CVE-2026-26080

nvd nist
Published: Jul 20, 2026Modified: Aug 25, 2026

JSON object

Loading...
3.7
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 2.2 / Impact: 1.4
Source: MITRE (Secondary)

Description

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.

Affected (24)

3 products
Haproxy
Aloha
Haproxy Enterprise
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Haproxy
From 3.2 to 3.2.12
From 3.3 to 3.3.3
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Haproxy
From 17.0.0 to 17.0.18
From 17.5.0 to 17.5.16
Configuration C
20 vulnerable
Vulnerable SoftwareAffected Versions
Haproxy
Version 3.2r1 1.0.0-353.334
Version 3.2r1 1.0.0-353.336
Version 3.2r1 1.0.0-353.347
Version 3.2r1 1.0.0-353.355
Version 3.2r1 1.0.0-353.376
Version 3.2r1 1.0.0-353.385
Version 3.2r1 1.0.0-353.398
Version 3.2r1 1.0.0-354.402
Version 3.2r1 1.0.0-354.439
Version 3.2r1 1.0.0-358.439
Version 3.2r1 1.0.0-359.440
Version 3.2r1 1.0.0-360.460
Version 3.2r1 1.0.0-362.473
Version 3.2r1 1.0.0-363.476
Version 3.2r1 1.0.0-363.478
Version 3.2r1 1.0.0-363.498
Version 3.2r1 1.0.0-363.511
Version 3.2r1 1.0.0-365.529
Version 3.2r1 1.0.0-365.531
Version 3.2r1 1.0.0-365.545

References (2)

Timeline

No history available yet.