CVE-2026-26080: Low severity HAProxy Technologies HAProxy Community Edition vulnerability
Published Jul 20, 2026
·Updated
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.
Affected Software
27 affected components
HAProxy Technologies HAProxy Community Edition>=3.2.0<3.3.3
HAProxy Technologies HAProxy Enterprise
HAProxy Technologies ALOHΑ
HAProxy HAProxy>=3.2<3.2.12
HAProxy HAProxy>=3.3<3.3.3
HAProxy ALOHA>=17.0.0<17.0.18
HAProxy ALOHA>=17.5.0<17.5.16
HAProxy HAProxy Enterprise=3.2r1-1.0.0-353.334
HAProxy HAProxy Enterprise=3.2r1-1.0.0-353.336
HAProxy HAProxy Enterprise=3.2r1-1.0.0-353.347
HAProxy HAProxy Enterprise=3.2r1-1.0.0-353.355
HAProxy HAProxy Enterprise=3.2r1-1.0.0-353.376
HAProxy HAProxy Enterprise=3.2r1-1.0.0-353.385
HAProxy HAProxy Enterprise=3.2r1-1.0.0-353.398
HAProxy HAProxy Enterprise=3.2r1-1.0.0-354.402
HAProxy HAProxy Enterprise=3.2r1-1.0.0-354.439
HAProxy HAProxy Enterprise=3.2r1-1.0.0-358.439
HAProxy HAProxy Enterprise=3.2r1-1.0.0-359.440
HAProxy HAProxy Enterprise=3.2r1-1.0.0-360.460
HAProxy HAProxy Enterprise=3.2r1-1.0.0-362.473
HAProxy HAProxy Enterprise=3.2r1-1.0.0-363.476
HAProxy HAProxy Enterprise=3.2r1-1.0.0-363.478
HAProxy HAProxy Enterprise=3.2r1-1.0.0-363.498
HAProxy HAProxy Enterprise=3.2r1-1.0.0-363.511
HAProxy HAProxy Enterprise=3.2r1-1.0.0-365.529
HAProxy HAProxy Enterprise=3.2r1-1.0.0-365.531
HAProxy HAProxy Enterprise=3.2r1-1.0.0-365.545
Remediation
Event History
Jul 20, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-26080?
CVE-2026-26080 has a severity rating of low, specifically a score of 3.7.
2
What software is affected by CVE-2026-26080?
CVE-2026-26080 affects HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3, as well as HAProxy Enterprise and ALOHA.
3
What type of vulnerability is CVE-2026-26080?
CVE-2026-26080 is a vulnerability that can cause HAProxy to enter a loop or crash due to mishandling of varint.
4
How do I fix CVE-2026-26080?
To fix CVE-2026-26080, update HAProxy to version 3.3.3 or later.
5
What impact does CVE-2026-26080 have on my system?
CVE-2026-26080 can cause service disruption by making HAProxy crash or enter a loop, affecting application availability.