HAProxy haproxy

Name: HAProxy haproxy
Brand: HAProxy

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical5high2medium0low

updated 2026-10-27

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	2024-07-04	2024-07-01	< 2024-07-04
CVE-2024-12085US	—	8.64% (95th)	Exploit	no fix	2025-01-14	≤ Fusion virtual images <20250121
CVE-2023-45539US	high8.2OT elevated	1.51% (74th)	Exploit	2.8.2	2023-11-28	< 2.8.2
CVE-2026-33555US	medium5.8	0.31% (23rd)	Exploit	3.3.6	2026-04-13	2 versions
CVE-2024-12088US	high7.5	4.65% (92nd)	—	no fix	2025-01-14	≤ Fusion virtual images <20250121
CVE-2024-12087US	high7.5	2.26% (83rd)	—	no fix	2025-01-14	≤ Fusion virtual images <20250121
CVE-2024-12086US	medium6.8	1.79% (78th)	—	no fix	2025-01-14	≤ Fusion virtual images <20250121
CVE-2024-45506US	high7.5	1.20% (68th)	—	hapee-2.9r1-lb 1.0.0-328.475	2024-09-04	< hapee-2.9r1-lb 1.0.0-328.475
CVE-2024-53008US	—	1.02% (63rd)	—	3.1.0	2024-11-28	< 3.1.0
CVE-2025-32464US	—	0.76% (55th)	—	no fix	2025-04-09	≤ 2.2 ≤3.1.6
CVE-2025-11230US	—	0.74% (54th)	—	no fix	2025-11-19	11 versions
CVE-2026-26080US	—	0.55% (46th)	—	3.2.12	2026-07-20	5 versions
CVE-2024-49214US	—	0.52% (44th)	—	2.9.11	2024-10-14	2 versions
CVE-2026-55204US	—	0.48% (41st)	—	no fix	2026-06-18	2 versions
CVE-2026-26081US	—	0.48% (41st)	—	3.2.12	2026-07-20	11 versions
CVE-2024-12747US	—	0.39% (32nd)	—	no fix	2025-01-14	≤ Fusion virtual images <20250121
CVE-2026-55203US	critical9.1	0.33% (27th)	—	no fix	2026-06-18	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-390Detection of Error Condition Without Action4 CVEs
CWE-908Use of Uninitialized Resource4 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency2 CVEs
CWE-35Path Traversal: '.../...//'2 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs
CWE-1025Comparison Using Wrong Factors1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.