CVE-2026-55204

score

<0.1

cvss

7.5

epss

0.5%

published

2026-06-18

kev added

—

first seen

2026-10-21

HAProxy <= 3.4.0 contains a null pointer dereference vulnerability caused by failure to validate hpack_dht_defrag() return value in hpack_dht_insert(), letting attackers cause denial of service by triggering HPACK dynamic table insertions under memory pressure.