CVE-2026-110353

Vendor

Canonical

Product

Squid / HAProxy / Varnish

CVSS

7.5

EPSS

0.008 (p57)

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 47
   Ubuntu notice Ubuntu 10h ago

   HAProxy vulnerabilities

   It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service.…

   CVE-2026-110353CVE-2026-110354 Canonical
2. 28
   CVE NVD 12d ago

   HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2…

   HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame. h2c_handle_ping in src/mux_h2.c does not check for a short read…

   CVSS 7.5 CVE-2026-110353