BIT-haproxy-2026-26080: Low severity HAProxy HAProxy Community Edition vulnerability

Q: Which deployments are affected?

HAProxy Community Edition versions in the 3.2.x and 3.3.x release lines before 3.3.3 are affected. HAProxy Enterprise and HAProxy ALOHA are also affected, but the provided data does not identify their affected version ranges.

Q: What impact can successful exploitation have?

Varint mishandling can cause HAProxy to enter a loop or crash, creating an availability impact. The provided severity vector indicates no confidentiality or integrity impact.

Q: Does exploitation require authentication or user interaction?

The supplied CVSS vector indicates network reachability, no privileges required, and no user interaction. It also rates attack complexity as high.

Published Jul 20, 2026

Updated

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.

Affected Software

3 affected components

HAProxy HAProxy Community Edition>=3.2.x<3.3.3

HAProxy HAProxy Enterprise

HAProxy HAProxy ALOHA

Event History

Jul 20, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

HAProxy Community Edition versions in the 3.2.x and 3.3.x release lines before 3.3.3 are affected. HAProxy Enterprise and HAProxy ALOHA are also affected, but the provided data does not identify their affected version ranges.

What impact can successful exploitation have?

Varint mishandling can cause HAProxy to enter a loop or crash, creating an availability impact. The provided severity vector indicates no confidentiality or integrity impact.

Does exploitation require authentication or user interaction?

The supplied CVSS vector indicates network reachability, no privileges required, and no user interaction. It also rates attack complexity as high.

BIT-haproxy-2026-26080: Low severity HAProxy HAProxy Community Edition vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments are affected?

What impact can successful exploitation have?

Does exploitation require authentication or user interaction?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What impact can successful exploitation have?

Does exploitation require authentication or user interaction?