CVE-2026-26081

Published: Jul 20, 2026Modified: Aug 25, 2026

4.8

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Exploitability: 2.2 / Impact: 2.5

Source: MITRE (Secondary)

Description

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.

Affected (88)

Products: Haproxy: Haproxy, Aloha, Haproxy Enterprise

3 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Haproxy Haproxy	From 3.0.0 to 3.0.16
Haproxy Haproxy	From 3.1 to 3.1.14
Haproxy Haproxy	From 3.2 to 3.2.12
Haproxy Haproxy	From 3.3 to 3.3.3

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Haproxy Aloha	From 16.5.0.0 to 16.5.30
Haproxy Aloha	From 17.0.0 to 17.0.18
Haproxy Aloha	From 17.5.0 to 17.5.16

Configuration C

81 vulnerable

Vulnerable Software	Affected Versions
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-337.363
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-337.390
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-337.394
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-339.395
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-339.405
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-339.415
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-339.455
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-339.466
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-339.471
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-341.475
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-342.482
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.495
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.503
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.561
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.564
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.591
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.608
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.641
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.655
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.672
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-345.673
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-346.792
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-346.795
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-346.800
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-346.803
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-346.810
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-346.834
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-347.835
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-348.870
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-348.875
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-349.880
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-349.883
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-349.885
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-349.903
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-349.916
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-350.918
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-350.928
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-345.233
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-346.274
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-346.287
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.299
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.338
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.362
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.405
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.419
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.431
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.449
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-348.519
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-349.585
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-350.593
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-350.602
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-350.625
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-350.633
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-351.652
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-352.687
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-353.690
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-353.692
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-353.715
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-353.730
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-354.732
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-354.743
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-353.334
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-353.336
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-353.347
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-353.355
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-353.376
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-353.385
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-353.398
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-354.402
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-354.439
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-358.439
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-359.440
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-360.460
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-362.473
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-363.476
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-363.478
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-363.498
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-363.511
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-365.529
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-365.531
Haproxy Haproxy Enterprise	Version 3.2r1 1.0.0-365.545

Related CWEs

CWE-130

Improper Handling of Length Parameter Inconsistency

The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.

References (2)

https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=4765277f4f915baac2d57db63538ff0a59966deb

Source: cve@mitre.org

PatchVendor Advisory

https://www.haproxy.org

Source: cve@mitre.org

Product

Timeline

No history available yet.