HAProxy vendor intelligence

HAProxy Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting HAProxy products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Total KEVs
1
Known exploited vulnerabilities affecting HAProxy products
In CISA KEV
0
Records also listed in the official catalog
Beyond CISA KEV
1
Additional exploited CVEs absent from CISA KEV
Sensor Observed
0
HAProxy KEVs with sensor-observed exploitation activity

The catalog gap matters for HAProxy exposure

One of the one exploited HAProxy CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss 100% of this vendor portfolio.

0%
Covered by CISA
100%
Beyond CISA
1
Product families

Attested HAProxy CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2024-45506

HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding...

HAProxy High Beyond CISA 04 Sep 2024

Showing 1 of 1 HAProxy known exploited vulnerabilities.

Recurring weakness patterns

Loop with unreachable exit condition ('infinite loop') account for one mapped occurrence across this HAProxy KEV portfolio.

Browse all KEVs →

Early warning alerts

Get alerts on high-impact exploitation

Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.

Occasional high-impact alerts. Unsubscribe anytime. See our Privacy Policy.