February 2026 — CVE-2026-26080 and CVE-2026-26081: QUIC denial of service
HAProxy patch for two high-severity QUIC vulnerabilities (CVE-2026-26080, CVE-2026-26081) that allow a remote denial of service attack. Upgrade now for protection or disable the QUIC component.