CVE-2026-26081

A flaw was found in HAProxy. This vulnerability, stemming from a missing length check in the NEW_TOKEN format, could allow a remote attacker to cause a low impact on data integrity and availability. This means an attacker might be able to subtly alter data or temporarily disrupt the service.

This Moderate impact vulnerability in HAProxy stems from a missing length check in the NEW_TOKEN format, which could lead to data integrity and availability issues. The high attack complexity required for exploitation reduces the immediate risk in typical Red Hat deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.