CVE-2026-26081

CVE-2026-26081 affects HAProxy Community Edition 3.0–3.3 prior to 3.3.3 and HAProxy Enterprise/ALOHA. The issue is a missing length check in the NEW_TOKEN format, enabling a potential denial-of-service condition. The CVSS base score is 4.8 (Medium) with network attack vector, high complexity, no ...