Login Request a demo
HE
Product
HAProxy Enterprise Edition
by HAProxy · last CVE Oct 22, 2026
2
CVEs
0
On KEV
7.5
Max CVSS
2
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 2Medium 0Low 0
Severity
All severities2Critical0High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add HAProxy Enterprise Edition to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-110353
New
7.5
1%
Oct 22
HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame
Affected: 3.2.0r1 before 3.2r1-378.1259; 3.3.0r1 before 3.3r1-377.1005
CVE-2026-110354
New
7.5
1%
Oct 22
HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request
Affected: 3.0r1 before 3.0r1-362.1441; 3.2r1 before 3.2r1-378.1259; 3.3r1 before 3.3r1-377.1005
Showing 2