Low severity3.7NVD Advisory· Published Jul 20, 2026· Updated Jul 21, 2026
CVE-2026-26080
CVE-2026-26080
Description
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.
Affected products
6- Range: 3.2.x - 3.3.x before 3.3.3
- osv-coords4 versionspkg:rpm/opensuse/haproxy&distro=openSUSE%20Leap%2016.0pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2016.0pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Micro%206.2
< 3.2.12+git0.6011f448e-160000.1.1+ 3 more
- (no CPE)range: < 3.2.12+git0.6011f448e-160000.1.1
- (no CPE)range: < 3.2.12+git0.6011f448e-160000.1.1
- (no CPE)range: < 3.2.12+git0.6011f448e-160000.1.1
- (no CPE)range: < 3.2.12+git0.6011f448e-160000.1.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.