CyberSecBulletin

HAProxy Technologies vulnerabilities

We track 2 vulnerabilities in HAProxy Technologies products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.

2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score

Latest HAProxy Technologies vulnerabilities

  • 7.5 High severity

    HAProxy: Loop with Unreachable Exit Condition

    CVE-2026-110354Haproxy

    HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeate

  • 7.3 High severity

    HAProxy: Inconsistent Interpretation of HTTP Requests

    CVE-2023-25950HAProxy TechnologiesEPSS 2.97%

    HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition.