Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-110354

Quick assessment

Affected
HAProxy HAProxy
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

HAProxy 3 版本（3.4.6 之前）存在一个漏洞，允许远程未认证的攻击者通过发送 HTTP/1.1 分块（chunked）请求，导致拒绝服务（DoS），具体表现为工作线程 CPU 持续耗尽。尽管 H1 多路复用器会在关闭连接前排空请求数据，但解析器会反复重复处理相同的字节，却无法推进解析进度。受影响的工作线程在超时机制触发且客户端断开连接后，仍会持续占用 100% 的 CPU 资源。若攻击者重复发送此类请求，可耗尽所有工作线程，直至服务进程被重启。

CVSS 7.5 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-110354

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without making progress. The affected thread stays busy at 100% CPU after timeouts expire and after the client disconnects, and repeated requests can consume all worker threads until the process is restarted.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不可达退出条件的循环(无限循环)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
HAProxy HAProxy 3.0.0 ~ 3.0.30 -
HAProxy HAProxy Enterprise Edition 3.0r1 ~ 3.0r1-362.1441 -
HAProxy Technologies HAProxy Kubernetes Ingress Controller 3.2.0 ~ 3.2.17 -
HAProxy Technologies Kubernetes Ingress Controller Enterprise 3.2.0 ~ 3.2.17-ee1 -

II. Public POCs for CVE-2026-110354

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-110354

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-110354 (1)

IV. Related Vulnerabilities

Same product: HAProxy
Same vendor: HAProxy
Same weakness: CWE-835

V. Comments for CVE-2026-110354

No comments yet

Leave a comment