HAProxy security vulnerabilities
Open-source infrastructure. Public CVE monitoring for HAProxy. Vendor security advisories are linked on this page.
Built for Operators of this product.
17 public records · 0 security-fix timeline events. 0 published in the last 7 days. 8 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 2
- Medium 0
- Low 0
2026-08-042 issues2026-11-01
Known exploited
View all known exploitedRecently published
Browse catalog- High7.5HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame.Check if you run itEPSS 0.74%Oct 22, 2026
- High7.5HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request.Check if you run itEPSS 0.81%Oct 22, 2026
- Critical9.1HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record heaCheck if you run itEPSS 0.33%Jun 18, 2026
- High8.8The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy.Check if you run itEPSS 0.19%Jun 2, 2026
- High7.4Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.66%Apr 24, 2026
- High8.9Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.35%Apr 24, 2026
- High7.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.43%Apr 24, 2026
- High8.9Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.82%Apr 24, 2026
- High7.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.42%Apr 20, 2026
- Medium5.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.39%Apr 20, 2026