CVE-2026-33555
Vulnerability in Haproxy
CVSS score
5.8
EPSS probability
%0.6
Risk score
0.0
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
One zero-byte QUIC packet is enough to desynchronize HAProxy's backend connection pool and smuggle HTTP requests across unrelated users — even users on a completely different frontend protocol.
Makefile Go / Python
https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html
Makefile Go / Python
Similar Vulnerabilities
7.5
CVE-2026-90678
Vulnerability in HAProxy
H
Patch verifiedEPSS %1
7.5
CVE-2026-55204
NULL pointer dereference in Haproxy
H
Patch verifiedEPSS %0
9.8
CVE-2026-109575
Missing authentication in HAProxy Data Plane API EE
H
Patch status unknownEPSS %0
9.1
CVE-2026-55203
Integer overflow in Haproxy
H
Patch verifiedEPSS %0
4.8
CVE-2026-26081
Vulnerability in Haproxy
H
Patch verifiedEPSS %0
3.7
CVE-2026-26080
Vulnerability in Haproxy
H
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-33555"