PT-2026-7983 · Haproxy · Haproxy

Published 2026-01-01 · Updated 2026-02-28 · CVE-2026-26081

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions HAProxy (affected versions not specified)

Description HAProxy is susceptible to a denial of service. A remote attacker may be able to cause HAProxy to crash by sending specially crafted INITIAL packets, specifically those using the NEW TOKEN format.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-26081

OPENSUSE-SU-2026:10187-1

OPENSUSE-SU-2026:20290-1

SUSE-SU-2026:20557-1

SUSE-SU-2026:20616-1

SUSE-SU-2026:20620-1

USN-8036-1

Affected Products

Haproxy

References · 22

• https://osv.dev/vulnerability/USN-8036-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20616-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-26081 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10187-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-26081 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8036-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20557-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-26081 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20620-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20290-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-26081 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-26081 · Vendor Advisory
• https://bugzilla.suse.com/1257976 · Note
• https://suse.com/security/cve/CVE-2026-26081 · Note
• https://twitter.com/Cezar_H_Linux/status/2022011749478936707 · Twitter Post