OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-93564

HIGH · CVSS 7.5 EPSS 0.89%

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

A reference-count leak in the HAProxy PROXY-v2 nested-TLV implementation can lead to memory exhaustion, potentially allowing an attacker to disrupt service availability. Organizations using HAProxy should prioritize this vulnerability to mitigate risks associated with denial-of-service attacks. Immediate action is recommended for those operating in high-traffic environments where service reliability is critical.

CVE
CVE-2026-93564
Severity
HIGH
CVSS
7.5
EPSS
0.89%

Original NVD Description

A flaw was found in Netty. A reference-count leak in the HAProxy PROXY-v2 message decoder allows a remote, unauthenticated attacker to send specially crafted PROXY-protocol v2 headers. This can lead to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.