Haproxy Aloha vulnerabilities
2 known vulnerabilities affecting haproxy/aloha.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1LOW1
Vulnerabilities
Page 1 of 1
CVE-2026-26081P4MEDIUMCVSS 4.8≥ 16.5.0.0, < 16.5.30≥ 17.0.0, < 17.0.18+1 more2026-07-20
CVE-2026-26081 [MEDIUM] CWE-130 CVE-2026-26081: HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
nvd
CVE-2026-26080P4LOWCVSS 3.7≥ 17.0.0, < 17.0.18≥ 17.5.0, < 17.5.162026-07-20
CVE-2026-26080 [LOW] CWE-252 CVE-2026-26080: HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.
nvd