CVE-2026-40460 NGINX ngx_quic_module vulnerability

HAProxy HTTP/3 -> HTTP/1 Desync: Cross-Protocol Smuggling via a Standalone QUIC FIN (CVE-2026-33555)

February 2026 — CVE-2026-26080 and CVE-2026-26081: QUIC denial of service

Debian DSA-6130-1 Deep Dive: HAProxy QUIC Denial of Service – Technical Analysis, Mitigation, and Performance Retention