CVE-2026-109575 | HAProxy Data Plane API up to 3.4.3 Shared Internal Request Server.ConfigureAPI improper authorization

October 12, 2026 Yanac

A vulnerability identified as very critical has been detected in HAProxy Data Plane API up to 3.4.3. Affected by this issue is the function Server.ConfigureAPI of the component Shared Internal Request Handler. The manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-109575. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More