Known Vulnerabilities for products from Haproxy
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Haproxy".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-59919 json | Not Provided | 2026-07-29 | 2026-07-29 | |
| CVE-2026-55851 json | Not Provided | 2026-07-21 | 2026-07-23 | |
| CVE-2026-55204 json | HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() with... | Not Provided | 2026-06-18 | 2026-07-14 |
| CVE-2026-55203 json | HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl f... | Not Provided | 2026-06-18 | 2026-07-14 |
| CVE-2026-48772 json | Not Provided | 2026-06-19 | 2026-06-22 | |
| CVE-2026-48059 json | Not Provided | 2026-06-12 | 2026-09-11 | |
| CVE-2026-47845 json | Not Provided | 2026-08-27 | 2026-08-27 | |
| CVE-2026-44893 json | Not Provided | 2026-06-12 | 2026-09-11 | |
| CVE-2026-33555 json | An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a pre... | Not Provided | 2026-04-13 | 2026-06-29 |
| CVE-2026-26081 json | HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ... | Not Provided | 2026-07-20 | 2026-08-25 |
| CVE-2026-26080 json | HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy En... | Not Provided | 2026-07-20 | 2026-08-25 |
| CVE-2023-45539 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.2 - HIGH | 2023-11-28 | 2023-12-04 |
| CVE-2023-40225 json | HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x ... | 7.2 - HIGH | 2023-08-10 | 2023-08-18 |
| CVE-2023-25950 json | HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter ... | 7.3 - HIGH | 2023-04-11 | 2023-11-07 |
| CVE-2023-25725 json | HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, a... | 9.1 - CRITICAL | 2023-02-14 | 2023-11-07 |
| CVE-2023-0836 json | An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11... | 7.5 - HIGH | 2023-03-29 | 2023-11-07 |
| CVE-2023-0056 json | An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could ... | 6.5 - MEDIUM | 2023-03-23 | 2023-04-03 |
| CVE-2022-0711 json | A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an at... | 7.5 - HIGH | 2022-03-02 | 2023-11-07 |
| CVE-2021-40346 json | An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smug... | 7.5 - HIGH | 2021-09-08 | 2023-11-07 |
| CVE-2021-39242 json | An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situation wit... | 7.5 - HIGH | 2021-08-17 | 2023-11-07 |
Known software with vulnerabilities from Haproxy
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Haproxy | Haproxy | - |
| Application | Haproxy | Proxyprotocol | - |