Vulnerabilidades em Haproxy
11 resultadosAnálise Vexday
O Vexday registra 1 CVE para o fornecedor HAProxy, nenhuma sob exploração ativa no catálogo KEV e nenhuma classificada como crítica pelo CVSS. A fraqueza dominante é a CWE-252 (retorno de função não verificado), e o único registro foi publicado nos últimos 90 dias, o que indica risco recente, mas de volume baixo na base atual.
CVE-2026-110354HIGHHAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via aEPSS 0.8%CVE-2025-32464MEDIUMHAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling ofEPSS 0.8%CVE-2026-90678HIGHAn issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy mEPSS 0.8%CVE-2026-110353HIGHHAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncateEPSS 0.7%CVE-2026-26080LOWHAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALEPSS 0.5%CVE-2026-55204HIGHHAProxy - NULL Pointer Dereference in hpack_dht_insert FunctionEPSS 0.5%CVE-2026-26081MEDIUMHAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also EPSS 0.5%CVE-2026-109575CRITICALIn HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authEPSS 0.4%CVE-2026-55203CRITICALHAProxy - Integer Overflow in FCGI Demux Record Length FieldEPSS 0.3%CVE-2026-33555MEDIUMAn issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announcEPSS 0.3%CVE-2025-59303MEDIUMHAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with EPSS 0.3%