- What: A vulnerability in HAProxy could allow a remote attacker to cause a denial of service.
- Impact: HAProxy could crash if it receives specially crafted network traffic.
- Affected: HAProxy version 3.0.12-0ubuntu0.25.10.3 on Ubuntu 25.10.
- Patch: Update to the specified package versions.
Ubuntu Security Notices USN-8036-1 USN-8036-1: HAProxy vulnerability Publication date 12 February 2026 Overview HAProxy could be made to crash if it received specially crafted network traffic. Releases 25.10 Packages haproxy - fast and reliable load balancing reverse proxy Details Asim Viladi Oglu Manizada discovered that HAProxy incorrectly handled certain INITIAL packets. A remote attacker could possibly use this issue to cause HAProxy to crash, resulting in a denial of service. Asim Viladi Oglu Manizada discovered that HAProxy incorrectly handled certain INITIAL packets. A remote attacker could possibly use this issue to cause HAProxy to crash, resulting in a denial of service. Update instructions In general, a standard system update will make all the necessary changes. Learn more about how to get the fixes. The problem can be corrected by updating your system to the following package versions: Ubuntu Release Package Version 25.10 questing haproxy – 3.0.12-0ubuntu0.25.10.3 Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. Get Ubuntu Pro References CVE-2026-26081 CVE-2026-26081