HAProxy vulnerabilities
It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service. (CVE-2026-110353) It was discovered that HAProxy incorrectly handled certain HTTP/1.1 chunked requests. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service. (CVE-2026-110354)
Read at Ubuntu Security Notices
- Vendor
- Canonical
- Product
- Squid / HAProxy / Varnish
- EPSS
- 0.008 (p57)
- Exposure class
- Edge / VPN / firewall
Why it ranks 47 (High)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Canonical)
- Covered by 2 independent sources
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)
- CVE-2026-110353 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-110354 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.