Threats Tagged 'cve-2026-109575'
View all threats tagged with 'cve-2026-109575'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-109575'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-109575 is a critical authentication bypass vulnerability in HAProxy Data Plane API Enterprise Edition versions 2.2.0 through 3.4.3. The flaw occurs because the global authentication logic disables Basic authentication on shared internal request handlers when TLS CA and numeric TLS port are configured, but mutual TLS verification is only enforced on the HTTPS path. This allows unauthenticated attackers to access HTTP or UNIX domain socket management endpoints without credentials, gaining full administrative API access. The vulnerability enables reading or replacing HAProxy configuration remotely or locally. It is fixed in versions 3.4.4, 3.3.9, 3.2.17, 3.0.25, 2.9.29, and corresponding Enterprise Edition backports. Join the discussion | CVE Database V5 | 10/12/2026, 19:32:13 UTC Added: 10/12/2026, 19:49:02 UTC |
Showing 1 to 1 of 1 result