2 matches found
CVE-2026-90678
A flaw was found in HAProxy. A remote, unauthenticated attacker can exploit a vulnerability in the HTTP/3 multiplexer when processing requests without a Content-Length header, leading to HTTP request smuggling. This occurs when HAProxy is configured with QUIC support and an HTTP/3 frontend, and...
8.9CVSS5.8AI score0.0077EPSS
SaveExploits0References6
haproxy: HAProxy: HTTP Request Smuggling via HTTP/3 Multiplexer Desynchronization
A flaw was found in HAProxy. A remote, unauthenticated attacker can exploit a vulnerability in the HTTP/3 multiplexer when processing requests without a Content-Length header, leading to HTTP request smuggling. This occurs when HAProxy is configured with QUIC support and an HTTP/3 frontend, and...
7.5CVSS5.8AI score0.0077EPSS
SaveExploits0References7
20