VYPR
Low severity3.7NVD Advisory· Published Jul 20, 2026· Updated Aug 25, 2026

CVE-2026-26080

CVE-2026-26080

Description

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

29
  • osv-coords5 versions
    < 3.2.12+git0.6011f448e-160000.1.1+ 4 more
    • (no CPE)range: < 3.2.12+git0.6011f448e-160000.1.1
    • (no CPE)range: < 3.2.12+git0.6011f448e-160000.1.1
    • (no CPE)range: < 3.2.12+git0.6011f448e-160000.1.1
    • (no CPE)range: >= 3.2.0, < 3.2.12
    • (no CPE)range: < 3.2.12+git0.6011f448e-160000.1.1
  • cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*
    Range: >=3.2,<3.2.12
  • cpe:2.3:a:haproxy:aloha:*:*:*:*:*:*:*:*
    Range: >=17.0.0,<17.0.18
  • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.334:*:*:*:*:*:*+ 20 more
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.334:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.336:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.347:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.355:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.376:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.385:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.398:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-354.402:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-354.439:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-358.439:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-359.440:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-360.460:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-362.473:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-363.476:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-363.478:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-363.498:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-363.511:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-365.529:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-365.531:*:*:*:*:*:*
    • cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-365.545:*:*:*:*:*:*
    • (no CPE)
  • Range: 3.2.x - 3.3.x before 3.3.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.