Haproxy Enterprise (Haproxy) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 314 known versions, newest CVE from 2026-07-20. Vendor: Haproxy.

CVEs of Haproxy Enterprise

• CVE-2026-26081 - CVSS 4.8 (medium), 2026-07-20: HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
• CVE-2026-26080 - CVSS 3.7 (low), 2026-07-20: HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also…
• CVE-2025-11230 - CVSS 7.5 (high), 2025-11-19: Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.