CVE-2026-110354

Vendor

Canonical

Product

Squid / HAProxy / Varnish

CVSS

7.5

EPSS

0.008 (p57)

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 47
   Ubuntu notice Ubuntu 10h ago

   HAProxy vulnerabilities

   It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service.…

   CVE-2026-110353CVE-2026-110354 Canonical
2. 28
   CVE NVD 12d ago

   HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an…

   HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing…

   CVSS 7.5 CVE-2026-110354