PT-2026-8282 · Debian+2 · Haproxy

Published 2026-01-01 · Updated 2026-04-07 · CVE-2026-26080

OSV

This update for haproxy fixes the following issues:

• Update to version 3.2.12+git0.6011f448e
• CVE-2026-26081: Fixed a DOS vulnerability in QUIC. (bsc#1257976)
• CVE-2026-26080: Fixed a DOS vulnerability in QUIC. (bsc#1257976)

Related Identifiers

CVE-2026-26080

OPENSUSE-SU-2026:20290-1

SUSE-SU-2026:20557-1

SUSE-SU-2026:20616-1

SUSE-SU-2026:20620-1

Affected Products

Haproxy

References · 16

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-26080 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20616-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20557-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20620-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20290-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-26080 · Vendor Advisory
• https://bugzilla.suse.com/1257976 · Note
• https://suse.com/security/cve/CVE-2026-26081 · Note
• https://suse.com/support/update/announcement/2026/suse-su-202620620-1 · Note
• https://suse.com/security/cve/CVE-2026-26080 · Note
• https://suse.com/support/update/announcement/2026/suse-su-202620557-1 · Note
• https://twitter.com/tetsuoai/status/2027611710979510561 · Twitter Post
• https://reddit.com/r/llmprogramming/comments/1setrt5/vulhunting_agents · Reddit Post
• https://suse.com/support/update/announcement/2026/suse-su-202620616-1 · Note
• https://bugzilla.suse.com/1257521 · Note