https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:44:41.079673+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-haproxy-2026-33555 BIT-haproxy-2026-33555 2026-10-03T18:44:41.086483+00:00

Affected: Bitnami: haproxy

An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with an empty payload. This can cause desynchronization issues with the backend server and could be used for request smuggling. The earliest affected version is 2.6.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0486 certfr-2026-avi-0486 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu… 2026-10-03T18:44:41.086538+00:00 certfr-2026-avi-0486 https://cve.radiocsirt.org/vuln/euvd-2026-292674 EUVD-2026-292674 2026-10-03T18:44:41.086558+00:00 EUVD-2026-292674 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33555 fkie_cve-2026-33555 2026-10-03T18:44:41.086571+00:00

An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with an empty payload. This can cause desynchronization issues with the backend server and could be used for request smuggling. The earliest affected version is 2.6.

 https://cve.radiocsirt.org/vuln/ghsa-5mp8-rq5m-pj7m GHSA-5mp8-rq5m-pj7m 2026-10-03T18:44:41.086594+00:00

An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with an empty payload. This can cause desynchronization issues with the backend server and could be used for request smuggling. The earliest affected version is 2.6.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-33555 msrc_CVE-2026-33555 — CVE-2026-33555 2026-10-03T18:44:41.086610+00:00 msrc_CVE-2026-33555 https://cve.radiocsirt.org/vuln/oesa-2026-2083 OESA-2026-2083 — haproxy security update 2026-10-03T18:44:41.086625+00:00

Affected: openEuler:24.03-LTS-SP3: haproxy

HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world's most visited ones. Security Fix(es):

An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with an empty payload. This can cause desynchronization issues with the backend server and could be used for request smuggling. The earliest affected version is 2.6.(CVE-2026-33555)

 https://cve.radiocsirt.org/vuln/rhsa-2026:8749 RHSA-2026:8749 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T18:44:41.086649+00:00

haproxy: HAProxy: Request smuggling via HTTP/3 parser desynchronization

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33555 UBUNTU-CVE-2026-33555 2026-10-03T18:44:41.086664+00:00

Affected: Ubuntu:24.04:LTS: haproxy, Ubuntu:25.10: haproxy, Ubuntu:26.04:LTS: haproxy

An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with an empty payload. This can cause desynchronization issues with the backend server and could be used for request smuggling. The earliest affected version is 2.6.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1074 WID-SEC-W-2026-1074 — HAProxy: Schwachstelle ermöglicht Manipulation von Dateien 2026-10-03T18:44:41.086686+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in HAProxy ausnutzen, um Dateien zu manipulieren.