57 matches found
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
...
AZL-93000 CVE-2026-26081 affecting package haproxy for versions less than 2.9.11-8
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...
CVE-2026-26080
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected...
CVE-2026-26081
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...
CVE-2026-26080
HAProxy vulnerability CVE-2026-26080 affects HAProxy Community Edition 3.2.x–3.3.x prior to 3.3.3; HAProxy Enterprise and ALOHA are affected. Root cause: mishandling of varint can cause a loop or crash, leading to DoS. Remediation: upgrade to 3.3.3 or newer (openSUSE/SUSE advisories also referenc...
CVE-2026-26081
CVE-2026-26081 affects HAProxy Community Edition 3.0–3.3 prior to 3.3.3 and HAProxy Enterprise/ALOHA. The issue is a missing length check in the NEW_TOKEN format, enabling a potential denial-of-service condition. The CVSS base score is 4.8 (Medium) with network attack vector, high complexity, no ...
EUVD-2026-45988
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected...
CVE-2026-26080: Unchecked Return Value
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected...
EUVD-2026-45989
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...
CVE-2026-26081
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...
CVE-2026-26081
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...
CVE-2026-26081
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...
CVE-2026-26080
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected...
CVE-2026-26080
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected...
Ubuntu: USN-8036-1 (CVE-2026-26081): HAProxy vulnerability
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...
📄 NCR Command Center Agent 16.3 Remote Code Execution
CMCAgent in NCR Command Center Agent version 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter within an XML document sent to port 8089 that enables the remote, unauthenticated execution of an arbitrary command as SYSTEM, as exploited in the wild in 2020 and/or 2021...
EUVD-2014-7188
Malware in sbrugna...
EUVD-2014-7204
Malware in sbrugna...