{"schema":"vulnpedia.research/1","cve":"CVE-2026-110353","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://git.haproxy.org/?p=haproxy.git;a=commit;h=cec63e95f62a7412484f1134f5aa227e5b7e1466","tags":["vendor-advisory","vendor-reference"],"source":"mitre","sourceId":"mitre","modified":"2026-10-22T02:53:33.198Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2026-10-22T02:53:33.198Z","url":"https://git.haproxy.org/?p=haproxy.git;a=commit;h=cec63e95f62a7412484f1134f5aa227e5b7e1466"},{"source":"nvd","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:17:35.540","url":"https://git.haproxy.org/?p=haproxy.git;a=commit;h=cec63e95f62a7412484f1134f5aa227e5b7e1466"},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://git.haproxy.org/?p=haproxy.git;a=commit;h=cec63e95f62a7412484f1134f5aa227e5b7e1466"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-110353","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-110353"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558750","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558750"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-110353","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-110353"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110353","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110353"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:83844","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://access.redhat.com/errata/RHSA-2026:83844"}]},{"source":"euvd","sourceId":"EUVD-2026-108001","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108001","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-108001","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108001"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"Red Hat Hardened Images:haproxy-0:3.0.30-0.1.hum1@aarch64","product":"haproxy-0:3.0.30-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83844"}],"purl":"pkg:rpm/redhat/haproxy@3.0.30-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"Red Hat Hardened Images:haproxy-0:3.0.30-0.1.hum1@s390x","product":"haproxy-0:3.0.30-0.1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83844"}],"purl":"pkg:rpm/redhat/haproxy@3.0.30-0.1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"Red Hat Hardened Images:haproxy-0:3.0.30-0.1.hum1@src","product":"haproxy-0:3.0.30-0.1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83844"}],"purl":"pkg:rpm/redhat/haproxy@3.0.30-0.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"Red Hat Hardened Images:haproxy-0:3.0.30-0.1.hum1@x86_64","product":"haproxy-0:3.0.30-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83844"}],"purl":"pkg:rpm/redhat/haproxy@3.0.30-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_ceph_storage_5:haproxy.src","product":"haproxy.src as a component of Red Hat Ceph Storage 5","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/haproxy?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_ceph_storage_5:haproxy22","product":"haproxy22 as a component of Red Hat Ceph Storage 5","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/haproxy22","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_enterprise_linux_10:haproxy","product":"haproxy as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_enterprise_linux_10:haproxy.src","product":"haproxy.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_enterprise_linux_7:haproxy","product":"haproxy as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_enterprise_linux_7:haproxy.src","product":"haproxy.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_enterprise_linux_8:haproxy","product":"haproxy as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_enterprise_linux_8:haproxy.src","product":"haproxy.src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_enterprise_linux_9:haproxy","product":"haproxy as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_enterprise_linux_9:haproxy.src","product":"haproxy.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_openshift_container_platform_4:haproxy.src","product":"haproxy.src as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_openshift_container_platform_4:haproxy18","product":"haproxy18 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy18","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_openshift_container_platform_4:haproxy20","product":"haproxy20 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy20","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_openshift_container_platform_4:haproxy22","product":"haproxy22 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy22","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_openshift_container_platform_4:haproxy26","product":"haproxy26 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy26","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]},{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json","productId":"red_hat_openshift_container_platform_4:haproxy28","product":"haproxy28 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/haproxy28","origins":[{"source":"redhat","sourceId":"CVE-2026-110353","modified":"2026-10-22T19:32:03+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110353.json"}]}],"vendorCoverage":{"total":20,"shown":20,"omitted":0,"source":"redhat"}}