{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","feed_url":"https://feed.craftedsignal.io/products/haproxy-community-quic/feed.json","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["HAProxy Enterprise (QUIC)","HAProxy Community (QUIC)","HAProxy ALOHA (QUIC)"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","denial-of-service","network-device"],"_cs_type":"advisory","_cs_vendors":["HAProxy Technologies"],"content_html":"\u003cp\u003eThe German Federal Office for Information Security (BSI) issued an advisory on July 21, 2026, detailing multiple vulnerabilities within HAProxy Enterprise, Community, and ALOHA products, specifically affecting their QUIC implementations. These flaws can be exploited by a remote, unauthenticated attacker to execute a Denial of Service (DoS) attack. The lack of authentication required for exploitation means these vulnerabilities pose a significant risk to the availability and stability of services relying on HAProxy as a load balancer or proxy, allowing attackers to disrupt critical network infrastructure. The advisory does not specify the exact nature of the vulnerabilities or provide CVEs, but emphasizes the potential for complete service disruption across affected versions.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eA successful exploitation of these vulnerabilities leads to a Denial of Service against HAProxy instances, affecting critical services that rely on them for load balancing, traffic routing, or proxying. While specific victim numbers or targeted sectors are not detailed, any organization utilizing affected versions of HAProxy Enterprise, Community, or ALOHA with QUIC enabled is at risk. The primary impact is a loss of availability for networked applications and services, which can lead to significant operational disruptions, financial losses, and reputational damage.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConsult the vendor advisory for specific patch versions or mitigation strategies to address the identified Denial of Service vulnerabilities in HAProxy Enterprise, Community, and ALOHA products utilizing QUIC.\u003c/li\u003e\n\u003cli\u003eReview network logs, specifically \u003ccode\u003ecategory: network_connection\u003c/code\u003e logs, for unusual traffic patterns or connection drops that could indicate a Denial of Service attack against HAProxy instances.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-07-21T07:45:33Z","date_published":"2026-07-21T07:45:33Z","id":"https://feed.craftedsignal.io/briefs/2026-07-haproxy-dos/","summary":"Multiple vulnerabilities exist in HAProxy Enterprise, Community, and ALOHA, specifically impacting QUIC implementations, which a remote, unauthenticated attacker can exploit to execute a Denial of Service (DoS) attack, disrupting service availability.","title":"Multiple HAProxy Vulnerabilities Lead to Denial of Service","url":"https://feed.craftedsignal.io/briefs/2026-07-haproxy-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - HAProxy Community (QUIC)","version":"https://jsonfeed.org/version/1.1"}