CVE-2026-93564

Name of the Vulnerable Software and Affected Versions Netty (affected versions not specified)

Description A reference-count leak exists in the HAProxy PROXY-v2 message decoder. A remote, unauthenticated attacker can exploit this by sending specially crafted PROXY-protocol v2 headers, specifically targeting nested-TLV ByteBuf. This flaw can lead to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.