← All advisories

Medium severity4.8NVD Advisory· Published Jul 20, 2026· Updated Aug 25, 2026

CVE-2026-26081

CVE-2026-26081

Description

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9

Haproxy/HAProxy Community Editionllm-create
Range: 3.0 - 3.3 before 3.3.3
ALOHA/ALOHAllm-create
Haproxy/Haproxy Enterprisellm-fuzzy
osv-coords6 versions
pkg:bitnami/haproxy pkg:rpm/opensuse/haproxy&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/haproxy&distro=openSUSE%20Tumbleweed pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2016.0 pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Micro%206.2
>= 3.0.0, < 3.0.16+ 5 more
- (no CPE)range: >= 3.0.0, < 3.0.16
- (no CPE)range: < 3.2.12+git0.6011f448e-160000.1.1
- (no CPE)range: < 3.3.3+git0.465d8e2fc-1.1
- (no CPE)range: < 3.2.12+git0.6011f448e-160000.1.1
- (no CPE)range: < 3.2.12+git0.6011f448e-160000.1.1
- (no CPE)range: < 3.2.12+git0.6011f448e-160000.1.1

Patches

Vulnerability mechanics

References

2

git.haproxy.orgnvdPatchVendor Advisory
www.haproxy.orgnvdProduct

News mentions

0

No linked articles in our index yet.