DEBIAN-CVE-2026-26081

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...

CVE-2026-26081

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...

openSUSE 16 Security Update : haproxy (openSUSE-SU-2026:20290-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20290-1 advisory. - Update to version 3.2.12+git0.6011f448e - CVE-2026-26081: Fixed a DOS vulnerability in QUIC. bsc1257976 - CVE-2026-26080: Fixed a DOS...

SUSE CVE-2026-26081

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...

CVE-2026-26081

creationtimestamp| type| source ---|---|--- 2026-02-12 18:15:59+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3meolxfmees2c 2026-02-13 15:05:22+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3meqrrmhjz42e...

PT-2026-7983

Name of the Vulnerable Software and Affected Versions HAProxy affected versions not specified Description HAProxy is susceptible to a denial of service. A remote attacker may be able to cause HAProxy to crash by sending specially crafted INITIAL packets, specifically those using the NEW TOKEN...