Sploitus

37 exploited vulnerabilities in Haproxy

Vulnerabilities with publicly known exploits

Vendors
Haproxy, Unknown, Nginx, Roxy-Wi, Apache, Alt Linux
With known exploits
37
Affected Roxy-wi versions
< 6.1.1.0, 8.2.6.3, 6.3.5.0, 8.2.8.2, 6.3.9.0
Affected Docker Haproxy Docker Image versions
< 1.8.18
Affected Puma versions
< 4.3.12, 5.6.4
Affected Haproxy versions
≤ 3.4.0, 2.0.31, 2.2.29, 2.4.22, 2.5.12, 2.6.9, 2.7.3, 2.1.4, 2.8.2, 2.2.27, 2.4.21, 2.5.11, 2.6.8, 2.1.0, 2.3.0, 2.7.0, 2.9.10, 3.0.4, 3.1, 2.2.21, 2.3.18, 2.4.13, 2.2.16, 2.3.13, 2.4.3, 2.0.25, 2.2.17, 2.3.14, 2.4.4, 2.5, 2.0.6, 2.4.30, 2.6.23, 2.8.16, 3.0.12, 3.1.9, 3.2.6, 1.9.8, 2.0.2, 2.6.7, 2.0.32, 2.2.30, 2.4.23, 2.6.15, 2.7.10, 3.3.6, 2.0.24, 1.5, 1.5.0, 1.5.1, 1.5.2, 1.5.3
Affected Wolfssl versions
< 5.9.0
Affected Haproxy Aloha Appliance versions
< 14.5.33, 15.5.28, 16.5.19, 17.0.7
Affected Haproxy Haproxy Enterprise versions
= 2.4r1, 2.6r1, 2.8r1, 3.0r1, 3.1r1
Affected Haproxy Kubernetes Ingress Controller versions
< 1.9.14-ee7, 3.1.12, 1.11.12-ee10, 3.0.15-ee4

Vulnerabilities with exploits

Highest CVSS first — 7 of these already have exploit code on Sploitus

CVE-2022-31161 4 exploits
CVSS 10.0 CRITICAL 2022-07-15FIX AVAILABLE
CVE-2022-31137 14 exploits
CVSS 10.0 HIGH 2022-07-08FIX AVAILABLE
CVE-2020-35195
CVSS 10.0 HIGH 2020-12-17FIX AVAILABLE
CVE-2026-45558
CVSS 9.9 CRITICAL 2026-06-10
CVE-2022-24790
CVSS 9.1 CRITICAL 2012-02-17FIX AVAILABLE
CVE-2026-55203
CVSS 9.1 CRITICAL 2026-06-18FIX AVAILABLE
CVE-2023-25725 1 exploit
CVSS 9.1 CRITICAL 2023-02-14FIX AVAILABLE
CVE-2020-11100
CVSS 8.8 HIGH 2020-04-02FIX AVAILABLE
CVE-2026-27811
CVSS 8.8 HIGH 2026-03-17FIX AVAILABLE
CVE-2026-55204
CVSS 8.7 HIGH 2026-06-18FIX AVAILABLE
CVE-2023-45539 1 exploit
CVSS 8.2 HIGH 2023-11-28FIX AVAILABLE
CVE-2023-0836
CVSS 7.5 HIGH 2021-03-11FIX AVAILABLE
CVE-2026-45565
CVSS 8.1 HIGH 2026-06-10
CVE-2024-45506
CVSS 7.5 HIGH 2024-09-04FIX AVAILABLE
CVE-2023-25803
CVSS 7.5 HIGH 2023-03-13FIX AVAILABLE
CVE-2022-0711
CVSS 7.5 HIGH 2022-02-11FIX AVAILABLE
CVE-2021-39242
CVSS 7.5 HIGH 2021-08-11FIX AVAILABLE
CVE-2021-40346 12 exploits
CVSS 7.5 HIGH 2021-09-07
CVE-2021-39240
2021-08-10FIX AVAILABLE
CVE-2019-18277
CVSS 7.5 HIGH 2019-09-07FIX AVAILABLE
CVE-2026-3547
CVSS 7.5 HIGH 2026-03-19FIX AVAILABLE
CVE-2026-22265
CVSS 7.5 HIGH 2026-01-15FIX AVAILABLE
CVE-2025-11230
CVSS 7.5 HIGH 2025-10-02FIX AVAILABLE
CVE-2019-14243
CVSS 7.5 HIGH 2019-07-23FIX AVAILABLE
CVE-2019-14241
CVSS 7.5 HIGH 2019-07-23FIX AVAILABLE
CVE-2023-25950
CVSS 7.3 HIGH 2023-01-26
CVE-2023-40225
CVSS 7.2 HIGH 2023-08-10FIX AVAILABLE
CVE-2025-32464
CVSS 6.8 MEDIUM 2025-04-08
CVE-2023-29004
CVSS 6.5 MEDIUM 2023-04-17
CVE-2025-34172
CVSS 6.1 MEDIUM 2025-09-09
CVE-2019-8953 3 exploits
CVSS 6.1 MEDIUM 2019-02-20FIX AVAILABLE
CVE-2026-33555 1 exploit
CVSS 5.8 MEDIUM 2026-04-13FIX AVAILABLE
CVE-2024-49214
CVSS 5.3 MEDIUM 2024-10-13FIX AVAILABLE
CVE-2021-39241
CVSS 5.3 MEDIUM 2021-08-11FIX AVAILABLE
CVE-2014-6269
CVSS 5.0 MEDIUM 2014-09-24FIX AVAILABLE
CVE-2026-26081
2026-01-01
CVE-2026-26080
2026-01-01FIX AVAILABLE