{"resultsPerPage":5,"startIndex":0,"totalResults":5,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-11T06:05:50.240","vulnerabilities":[{"cve":{"id":"CVE-2026-33555","sourceIdentifier":"cve@mitre.org","published":"2026-04-13T17:16:28.237","lastModified":"2026-10-18T20:16:48.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with an empty payload. This can cause desynchronization issues with the backend server and could be used for request smuggling. The earliest affected version is 2.6."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"HAProxy","product":"HAProxy","defaultStatus":"unaffected","versions":[{"version":"2.6","lessThan":"3.3.6","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-22T18:42:59.239377Z","id":"CVE-2026-33555","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@mitre.org","type":"Secondary","description":[{"lang":"en","value":"CWE-130"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndExcluding":"3.3.6","matchCriteriaId":"B0C66EEE-8E91-4525-9187-0FB58152B8BC"}]}]}],"references":[{"url":"https://github.com/haproxy/haproxy/commit/05a295441c621089ffa4318daf0dbca2dd756a84","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.haproxy.com/documentation/haproxy-aloha/changelog/","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"https://www.haproxy.org","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.mail-archive.com/haproxy@formilux.org/msg46752.html","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"https://lists.debian.org/debian-lts-announce/2026/10/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-55203","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-06-18T17:16:34.373","lastModified":"2026-10-26T00:10:00.150","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, the drl field wraps to 0, causing incorrect record consumption and allowing malicious FastCGI backends to desynchronize the FCGI framing parser, potentially causing request routing errors, response smuggling, or memory safety issues."},{"lang":"es","value":"HAProxy hasta la versión 3.4.0, corregido en el commit 5985276, contiene una vulnerabilidad de desbordamiento de entero en el campo drl de la estructura fcgi_conn que permite un análisis incorrecto del búfer como nuevas cabeceras de registro FCGI. Cuando contentLength es 65535 y paddingLength es 1 o más, el campo drl vuelve a 0, causando un consumo incorrecto de registros y permitiendo a backends FastCGI maliciosos desincronizar el analizador de tramas FCGI, lo que podría causar errores de enrutamiento de solicitudes, contrabando de respuestas o problemas de seguridad de la memoria."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"haproxy","product":"haproxy","defaultStatus":"unaffected","repo":"https://github.com/haproxy/haproxy","packageURL":"pkg:github/haproxy/haproxy","versions":[{"version":"0","lessThanOrEqual":"3.4.0","versionType":"semver","status":"affected"},{"version":"5985276735777634d8c85f1d73bb7764aab0d6dd","versionType":"git","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":4.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-23T02:04:34.549032Z","id":"CVE-2026-55203","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.36","matchCriteriaId":"88E7AA4A-F1FA-4F49-A292-438B28F462C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5","versionEndExcluding":"2.6.30","matchCriteriaId":"2D8EB6E1-7127-4DD4-A00B-442795722F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7","versionEndExcluding":"2.8.25","matchCriteriaId":"AEE6ECD6-2498-4961-A27F-9B12379C8CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.9","versionEndExcluding":"3.0.24","matchCriteriaId":"DE40B7E0-830C-4D4E-ACDF-97C503312707"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"3.2.20","matchCriteriaId":"60DCBD0D-4201-4AAD-A6D3-178F8412EB44"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3","versionEndExcluding":"3.4.1","matchCriteriaId":"6D9D0A12-A3D0-4E8D-BB1C-F964910A004D"}]}]}],"references":[{"url":"https://github.com/haproxy/haproxy/commit/5985276735777634d8c85f1d73bb7764aab0d6dd","source":"disclosure@vulncheck.com","tags":["Patch"]},{"url":"https://www.vulncheck.com/advisories/haproxy-integer-overflow-in-fcgi-demux-record-length-field","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-55204","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-06-18T17:16:34.567","lastModified":"2026-10-26T11:10:00.157","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"HAProxy through  3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_defrag() when the memory pool is exhausted. An attacker can trigger HPACK dynamic table insertions under memory pressure to dereference a NULL pointer and crash HAProxy worker processes, causing denial of service."},{"lang":"es","value":"HAProxy hasta la versión 3.4.0, corregido en el commit 9a6d1fe, contiene una vulnerabilidad de desreferencia de puntero nulo en hpack_dht_insert() dentro de src/hpack-tbl.c que no valida el valor de retorno de hpack_dht_defrag() cuando el pool de memoria está agotado. Un atacante puede desencadenar inserciones en la tabla dinámica HPACK bajo presión de memoria para desreferenciar un puntero NULO y bloquear los procesos de trabajador de HAProxy, causando denegación de servicio."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"haproxy","product":"haproxy","defaultStatus":"unaffected","repo":"https://github.com/haproxy/haproxy","packageURL":"pkg:github/haproxy/haproxy","versions":[{"version":"0","lessThanOrEqual":"3.4.0","versionType":"semver","status":"affected"},{"version":"9a6d1fe3f00d86ab4ea6ea6ea0a5d48fc058a513","versionType":"git","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-18T17:26:27.738915Z","id":"CVE-2026-55204","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.36","matchCriteriaId":"88E7AA4A-F1FA-4F49-A292-438B28F462C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5","versionEndExcluding":"2.6.30","matchCriteriaId":"2D8EB6E1-7127-4DD4-A00B-442795722F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7","versionEndExcluding":"2.8.25","matchCriteriaId":"AEE6ECD6-2498-4961-A27F-9B12379C8CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.9","versionEndExcluding":"3.0.24","matchCriteriaId":"DE40B7E0-830C-4D4E-ACDF-97C503312707"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"3.2.20","matchCriteriaId":"60DCBD0D-4201-4AAD-A6D3-178F8412EB44"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3","versionEndExcluding":"3.4.1","matchCriteriaId":"6D9D0A12-A3D0-4E8D-BB1C-F964910A004D"}]}]}],"references":[{"url":"https://github.com/haproxy/haproxy/commit/9a6d1fe3f00d86ab4ea6ea6ea0a5d48fc058a513","source":"disclosure@vulncheck.com","tags":["Patch"]},{"url":"https://www.vulncheck.com/advisories/haproxy-null-pointer-dereference-in-hpack-dht-insert-function","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-26080","sourceIdentifier":"cve@mitre.org","published":"2026-07-20T16:16:57.057","lastModified":"2026-08-25T15:43:56.200","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"HAProxy","product":"HAProxy","defaultStatus":"unaffected","versions":[{"version":"3.2","lessThan":"3.2.12","versionType":"custom","status":"affected"},{"version":"3.3","lessThan":"3.3.3","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-20T18:16:29.299899Z","id":"CVE-2026-26080","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@mitre.org","type":"Secondary","description":[{"lang":"en","value":"CWE-252"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2","versionEndExcluding":"3.2.12","matchCriteriaId":"4B1493FD-C53C-4CE2-A510-B0CD367899D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3","versionEndExcluding":"3.3.3","matchCriteriaId":"62995296-DBA7-4C11-B121-B6A54FFF883E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:aloha:*:*:*:*:*:*:*:*","versionStartIncluding":"17.0.0","versionEndExcluding":"17.0.18","matchCriteriaId":"24B20024-991F-4811-9DA7-A5285D150276"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:aloha:*:*:*:*:*:*:*:*","versionStartIncluding":"17.5.0","versionEndExcluding":"17.5.16","matchCriteriaId":"6CC6D43E-DD3A-476A-8ADD-E17172E39D7F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.334:*:*:*:*:*:*","matchCriteriaId":"9612E73F-5790-4A1F-A2C5-433BF1774AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.336:*:*:*:*:*:*","matchCriteriaId":"2952B8E0-B42C-40CC-A65A-B36C3E9F3D05"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.347:*:*:*:*:*:*","matchCriteriaId":"C1B62FD2-2330-453F-BA70-484D1B7070FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.355:*:*:*:*:*:*","matchCriteriaId":"1EEB78AA-28A5-4379-968C-06586BD364ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.376:*:*:*:*:*:*","matchCriteriaId":"7197F987-D00B-4813-96FA-8021837D74E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.385:*:*:*:*:*:*","matchCriteriaId":"1EC14458-868F-4E31-A05D-1915CDFBA2FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.398:*:*:*:*:*:*","matchCriteriaId":"75189C3E-AD66-4FB9-996C-413BDE9E813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-354.402:*:*:*:*:*:*","matchCriteriaId":"78085408-69CC-474D-9384-98D51C0CE84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-354.439:*:*:*:*:*:*","matchCriteriaId":"7A7D3C8C-27EE-4BBD-8BFC-5EE01D3EB2CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-358.439:*:*:*:*:*:*","matchCriteriaId":"BA7668BC-34EE-4524-B2A0-862FF8A7FA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-359.440:*:*:*:*:*:*","matchCriteriaId":"597390EB-CAE0-4926-86D5-A72E88B699E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-360.460:*:*:*:*:*:*","matchCriteriaId":"CA3DAE64-AFFE-4F7D-9285-1CF9E77D64B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-362.473:*:*:*:*:*:*","matchCriteriaId":"05494560-7CF0-471A-BF9E-3DCE92137E00"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-363.476:*:*:*:*:*:*","matchCriteriaId":"7900E687-83BF-40C1-8E07-ECC4AD628029"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-363.478:*:*:*:*:*:*","matchCriteriaId":"EC300D02-36F7-46C8-8613-D0992A1F01E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-363.498:*:*:*:*:*:*","matchCriteriaId":"D27C0E49-CFA5-487C-8925-A647F9A4C0F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-363.511:*:*:*:*:*:*","matchCriteriaId":"8F9AFC1E-49A5-4B46-AD5E-65C188F4CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-365.529:*:*:*:*:*:*","matchCriteriaId":"26145D01-6E25-4D77-81C9-6EBFFCC59738"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-365.531:*:*:*:*:*:*","matchCriteriaId":"1FF50A08-176A-4868-9FC9-A73242309290"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-365.545:*:*:*:*:*:*","matchCriteriaId":"379630E9-8313-4D6A-9424-51B7FE778134"}]}]}],"references":[{"url":"https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=5bb098ce8a656ec5711b4de3e4c87f12b216e7a1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.haproxy.org","source":"cve@mitre.org","tags":["Product"]}]}},{"cve":{"id":"CVE-2026-26081","sourceIdentifier":"cve@mitre.org","published":"2026-07-20T16:16:57.203","lastModified":"2026-08-25T15:43:31.907","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"HAProxy","product":"HAProxy","defaultStatus":"unaffected","versions":[{"version":"3.0","lessThan":"3.0.12","versionType":"custom","status":"affected"},{"version":"3.1","lessThan":"3.1.14","versionType":"custom","status":"affected"},{"version":"3.2","lessThan":"3.2.12","versionType":"custom","status":"affected"},{"version":"3.3","lessThan":"3.3.3","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-20T18:18:33.060272Z","id":"CVE-2026-26081","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@mitre.org","type":"Secondary","description":[{"lang":"en","value":"CWE-130"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.16","matchCriteriaId":"225C4586-5D22-4952-A89B-9E92079CBC63"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"3.1.14","matchCriteriaId":"82BC7681-9C1F-456E-95F8-67D4F37D569D"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2","versionEndExcluding":"3.2.12","matchCriteriaId":"4B1493FD-C53C-4CE2-A510-B0CD367899D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3","versionEndExcluding":"3.3.3","matchCriteriaId":"62995296-DBA7-4C11-B121-B6A54FFF883E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:aloha:*:*:*:*:*:*:*:*","versionStartIncluding":"16.5.0.0","versionEndExcluding":"16.5.30","matchCriteriaId":"C3A65BEB-B965-4B6A-B99F-A8DD57D1BBA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:aloha:*:*:*:*:*:*:*:*","versionStartIncluding":"17.0.0","versionEndExcluding":"17.0.18","matchCriteriaId":"24B20024-991F-4811-9DA7-A5285D150276"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:aloha:*:*:*:*:*:*:*:*","versionStartIncluding":"17.5.0","versionEndExcluding":"17.5.16","matchCriteriaId":"6CC6D43E-DD3A-476A-8ADD-E17172E39D7F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-337.363:*:*:*:*:*:*","matchCriteriaId":"F0E870DD-77B1-4991-8214-3045C716B829"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-337.390:*:*:*:*:*:*","matchCriteriaId":"31B8250F-166E-436C-86C9-B166D9F51174"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-337.394:*:*:*:*:*:*","matchCriteriaId":"876B49A3-D774-41BF-B82A-C984653FF747"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.395:*:*:*:*:*:*","matchCriteriaId":"83E3B1EC-F7C4-47A6-8072-F6B5A7C16C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.405:*:*:*:*:*:*","matchCriteriaId":"952817EA-CF9E-4D94-B46E-CCB2C3C3D1C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.415:*:*:*:*:*:*","matchCriteriaId":"707AC5FF-83FC-4D96-BC58-8C7E8C5C4B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.455:*:*:*:*:*:*","matchCriteriaId":"9CDDB090-B055-462B-96D9-B05620AED9F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.466:*:*:*:*:*:*","matchCriteriaId":"2733B7FF-093C-4DB8-8031-066D7E3567DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.471:*:*:*:*:*:*","matchCriteriaId":"F63F0736-12CC-4344-8ECD-E1973BB1CCEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-341.475:*:*:*:*:*:*","matchCriteriaId":"849FAAB5-4222-4FBA-876C-3312CC7803F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-342.482:*:*:*:*:*:*","matchCriteriaId":"1BE6D285-42D0-4024-A25A-7D584E1CF052"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.495:*:*:*:*:*:*","matchCriteriaId":"E9D85731-4353-452E-97EF-FA7EC68BDE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.503:*:*:*:*:*:*","matchCriteriaId":"220E82EF-4AC0-4459-B8D6-A600138E3462"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.561:*:*:*:*:*:*","matchCriteriaId":"A30FA493-C83D-4E7A-8540-CF00D943065F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.564:*:*:*:*:*:*","matchCriteriaId":"222D33C0-E9D8-4F9F-99BE-EC27C8DB3D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.591:*:*:*:*:*:*","matchCriteriaId":"677A3845-FB85-4961-BCDF-10442D10F57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.608:*:*:*:*:*:*","matchCriteriaId":"31508926-1A97-4338-9F98-B5747F67F568"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.641:*:*:*:*:*:*","matchCriteriaId":"B383E20A-19E3-405E-938C-86D51A2D4856"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.655:*:*:*:*:*:*","matchCriteriaId":"04DB4AD7-19F4-42FF-9D79-383AD773A0BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.672:*:*:*:*:*:*","matchCriteriaId":"9BA28B3B-923F-43FB-9528-06F3E151ECD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-345.673:*:*:*:*:*:*","matchCriteriaId":"03CA5120-0866-492D-B198-1345BAB13ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-346.792:*:*:*:*:*:*","matchCriteriaId":"7B0FA010-1F5E-406D-A0A9-6A631D4EB308"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-346.795:*:*:*:*:*:*","matchCriteriaId":"4AA77F5A-6234-4D75-9714-EB8D145D3849"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-346.800:*:*:*:*:*:*","matchCriteriaId":"332B6C88-5A96-4513-9EC9-39352B5A58D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-346.803:*:*:*:*:*:*","matchCriteriaId":"2A21388D-8D71-478B-A042-0A9C465FC263"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-346.810:*:*:*:*:*:*","matchCriteriaId":"2BA6ADD4-10F9-4E43-A867-E5528FCDD909"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-346.834:*:*:*:*:*:*","matchCriteriaId":"90BEDC31-31D9-4B0C-BAE1-EC2AC496181C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-347.835:*:*:*:*:*:*","matchCriteriaId":"07566241-7B62-4BDE-A689-8174C8D47C55"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-348.870:*:*:*:*:*:*","matchCriteriaId":"C7B660BC-9BE6-4ACE-BEAC-DF51ED186920"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-348.875:*:*:*:*:*:*","matchCriteriaId":"4CC0DFF1-582F-4A27-8CC3-DC6A413BC53C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-349.880:*:*:*:*:*:*","matchCriteriaId":"4C26B4A1-2372-42D9-9FAB-F7F7625D220B"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-349.883:*:*:*:*:*:*","matchCriteriaId":"5CB7DD98-EFDD-4242-AB36-5531B213E2C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-349.885:*:*:*:*:*:*","matchCriteriaId":"E04620C8-FA6C-4C80-9502-F159E2B74560"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-349.903:*:*:*:*:*:*","matchCriteriaId":"C031821F-DF37-4111-AD82-228535921E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-349.916:*:*:*:*:*:*","matchCriteriaId":"4FDB95D4-87ED-4CEB-82EF-FA482399B6D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-350.918:*:*:*:*:*:*","matchCriteriaId":"F0B3CEDC-E148-4CEA-9907-1E55D8C3111B"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-350.928:*:*:*:*:*:*","matchCriteriaId":"E880A08D-DF73-4FDB-98DB-80F919DA697E"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-345.233:*:*:*:*:*:*","matchCriteriaId":"C24BF2C0-1492-42C9-8E7E-2B68B071C1B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-346.274:*:*:*:*:*:*","matchCriteriaId":"0016CF83-721C-4980-ADAE-F5209B5E7011"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-346.287:*:*:*:*:*:*","matchCriteriaId":"40BB8A3F-15AA-449A-A56B-33FE2EE1ED31"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.299:*:*:*:*:*:*","matchCriteriaId":"8454C417-0063-490A-B29B-BCFE54D20310"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.338:*:*:*:*:*:*","matchCriteriaId":"58639E20-9E1F-4E87-9E8D-9EDBF798E7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.362:*:*:*:*:*:*","matchCriteriaId":"34135E7F-F23B-4A42-9CA7-5CACE872D1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.405:*:*:*:*:*:*","matchCriteriaId":"1707E7E0-8B91-40A1-82ED-753DBC632819"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.419:*:*:*:*:*:*","matchCriteriaId":"5A92CCCE-3BBE-4201-9B98-3876CEDF8492"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.431:*:*:*:*:*:*","matchCriteriaId":"27415EED-4427-43E8-A64D-669C2F00439A"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.449:*:*:*:*:*:*","matchCriteriaId":"61CEE1D7-7762-4A6B-A1C9-1101D26E75E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-348.519:*:*:*:*:*:*","matchCriteriaId":"6B5AE8AE-3DA3-4C24-B5E2-17CA6D9BDC0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-349.585:*:*:*:*:*:*","matchCriteriaId":"BECD4AE8-0ECE-4C89-947E-884D6B387D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-350.593:*:*:*:*:*:*","matchCriteriaId":"7D29E03E-23F9-4241-80AA-D0623930EEEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-350.602:*:*:*:*:*:*","matchCriteriaId":"881BC39D-4CD4-4855-AB0B-85D15230E6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-350.625:*:*:*:*:*:*","matchCriteriaId":"C58E100F-9059-453C-ACD8-314CA6380425"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-350.633:*:*:*:*:*:*","matchCriteriaId":"F4B73857-14CC-4D0E-811F-347E596C4F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-351.652:*:*:*:*:*:*","matchCriteriaId":"1CD604FA-4898-49F5-A90D-A640E168E4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-352.687:*:*:*:*:*:*","matchCriteriaId":"1582B1BE-284C-400A-8B86-546200F9C27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-353.690:*:*:*:*:*:*","matchCriteriaId":"A8A42FD3-3421-4374-AA35-C483D6B6D463"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-353.692:*:*:*:*:*:*","matchCriteriaId":"8421F472-EC15-4AD8-8E30-F68ABABE789F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-353.715:*:*:*:*:*:*","matchCriteriaId":"96361276-E678-441A-9CA8-CDC777443218"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-353.730:*:*:*:*:*:*","matchCriteriaId":"9421C569-57B9-461D-A28F-72F6FC23BB44"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-354.732:*:*:*:*:*:*","matchCriteriaId":"52704F15-224A-41FD-BEB7-CB5F7978CF48"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-354.743:*:*:*:*:*:*","matchCriteriaId":"1F670621-84D0-41DC-BFF6-4EBE37FFC883"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.334:*:*:*:*:*:*","matchCriteriaId":"9612E73F-5790-4A1F-A2C5-433BF1774AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.336:*:*:*:*:*:*","matchCriteriaId":"2952B8E0-B42C-40CC-A65A-B36C3E9F3D05"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.347:*:*:*:*:*:*","matchCriteriaId":"C1B62FD2-2330-453F-BA70-484D1B7070FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.355:*:*:*:*:*:*","matchCriteriaId":"1EEB78AA-28A5-4379-968C-06586BD364ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.376:*:*:*:*:*:*","matchCriteriaId":"7197F987-D00B-4813-96FA-8021837D74E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.385:*:*:*:*:*:*","matchCriteriaId":"1EC14458-868F-4E31-A05D-1915CDFBA2FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-353.398:*:*:*:*:*:*","matchCriteriaId":"75189C3E-AD66-4FB9-996C-413BDE9E813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-354.402:*:*:*:*:*:*","matchCriteriaId":"78085408-69CC-474D-9384-98D51C0CE84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-354.439:*:*:*:*:*:*","matchCriteriaId":"7A7D3C8C-27EE-4BBD-8BFC-5EE01D3EB2CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-358.439:*:*:*:*:*:*","matchCriteriaId":"BA7668BC-34EE-4524-B2A0-862FF8A7FA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-359.440:*:*:*:*:*:*","matchCriteriaId":"597390EB-CAE0-4926-86D5-A72E88B699E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-360.460:*:*:*:*:*:*","matchCriteriaId":"CA3DAE64-AFFE-4F7D-9285-1CF9E77D64B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-362.473:*:*:*:*:*:*","matchCriteriaId":"05494560-7CF0-471A-BF9E-3DCE92137E00"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-363.476:*:*:*:*:*:*","matchCriteriaId":"7900E687-83BF-40C1-8E07-ECC4AD628029"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-363.478:*:*:*:*:*:*","matchCriteriaId":"EC300D02-36F7-46C8-8613-D0992A1F01E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-363.498:*:*:*:*:*:*","matchCriteriaId":"D27C0E49-CFA5-487C-8925-A647F9A4C0F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-363.511:*:*:*:*:*:*","matchCriteriaId":"8F9AFC1E-49A5-4B46-AD5E-65C188F4CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-365.529:*:*:*:*:*:*","matchCriteriaId":"26145D01-6E25-4D77-81C9-6EBFFCC59738"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-365.531:*:*:*:*:*:*","matchCriteriaId":"1FF50A08-176A-4868-9FC9-A73242309290"},{"vulnerable":true,"criteria":"cpe:2.3:a:haproxy:haproxy_enterprise:3.2r1:1.0.0-365.545:*:*:*:*:*:*","matchCriteriaId":"379630E9-8313-4D6A-9424-51B7FE778134"}]}]}],"references":[{"url":"https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=4765277f4f915baac2d57db63538ff0a59966deb","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.haproxy.org","source":"cve@mitre.org","tags":["Product"]}]}}]}