Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2026-26080

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.

Description

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HAProxy HAProxy

Default version status: unaffected

  • 3.2 to < 3.2.12affected
  • 3.3 to < 3.3.3affected

References