low3.7
CVE-2026-26080
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled.
Impact
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Haproxy | Haproxy | from 3.2 before 3.2.12 from 3.3 before 3.3.3 |
| Haproxy | Aloha | from 17.0.0 before 17.0.18 from 17.5.0 before 17.5.16 |
| Haproxy | Haproxy Enterprise | Version 3.2r1 |