CVE-2026-26081 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.8 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 39.37%

Affected Products (NVD)

Vendor	Product	Version
haproxy	haproxy	3.0.0 ≤ 𝑥 < 3.0.16
haproxy	haproxy	3.1 ≤ 𝑥 < 3.1.14
haproxy	haproxy	3.2 ≤ 𝑥 < 3.2.12
haproxy	haproxy	3.3 ≤ 𝑥 < 3.3.3
haproxy	aloha	16.5.0.0 ≤ 𝑥 < 16.5.30
haproxy	aloha	17.0.0 ≤ 𝑥 < 17.0.18
haproxy	aloha	17.5.0 ≤ 𝑥 < 17.5.16
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.0r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.1r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1
haproxy	haproxy_enterprise	3.2r1:r1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

haproxy

bookworm	2.6.12-1+deb12u3 fixed
bookworm (security)	2.6.12-1+deb12u3 fixed
bullseye	2.2.9-2+deb11u6 fixed
bullseye (security)	2.2.9-2+deb11u7 fixed
forky	3.2.22-1 fixed
sid	3.2.23-1 fixed
trixie	3.0.11-1+deb13u3 fixed
trixie (security)	3.0.11-1+deb13u3 fixed

Ubuntu Releases

Ubuntu Product

Codename

haproxy

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
questing	Fixed 3.0.12-0ubuntu0.25.10.3 released
xenial	not-affected

Azure Linux Releases

Azure Package

Release

haproxy

Azure Linux 3.0

0:2.9.11-8.azl3

fixed

Common Weakness Enumeration

CWE-130 - Improper Handling of Length Parameter Inconsistency
The software parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.

References

https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=4765277f4f915baac2d57db63538ff0a59966deb

https://www.haproxy.org