CVE-2026-26081CWE-130

CVE-2026-26081

Medium · published July 20, 2026

CVSS v3.1
4.8
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00476 · 40.2th percentile
Weakness
CWE-130 · Improper Handling of Length Parameter Inconsistency
Published
2026-07-20T20:16Z
Affected products (88)
ProductVersionsFixed in
haproxy/haproxy≥ 3.0.0, < 3.0.163.0.16
haproxy/haproxy≥ 3.1, < 3.1.143.1.14
haproxy/haproxy≥ 3.2, < 3.2.123.2.12
haproxy/haproxy≥ 3.3, < 3.3.33.3.3
haproxy/aloha≥ 16.5.0.0, < 16.5.3016.5.30
haproxy/aloha≥ 17.0.0, < 17.0.1817.0.18
haproxy/aloha≥ 17.5.0, < 17.5.1617.5.16
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
haproxy/haproxy_enterpriseall versions—
References (2)
https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=4765277f4f915baac2d57db63538ff0a59966deb · [email protected]https://www.haproxy.org · [email protected]
EPSS history
Timeline
  • 20 JUL 00:00Z
    HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format
    cvelistv5