Haproxy Enterprise Edition (Haproxy) - vulnerabilities (CVEs)

2 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-22. Vendor: Haproxy.

CVEs of Haproxy Enterprise Edition

• CVE-2026-110353 - CVSS 7.5 (high), 2026-10-22: HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING…
• CVE-2026-110354 - CVSS 7.5 (high), 2026-10-22: HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked…