CVE-2024-45506

✓ Confirmed 0-Day

Triaged: March 5, 2026 1 article

VulnLookup ↗ NVD ↗ MITRE ↗

EPSS Score

Source: FIRST.org · 2026-05-24

1.49%

probability

This CVE has a 1.49% probability of being exploited in the next 30 days.

0% Top 81.3th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

CWE-691 · Insufficient Control Flow Management CWE-834 CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2024-45506 HAProxy 2.9.x before 2.9.10 3.0.x before 3.0.4 and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding (h2_send loop) under a certain set of conditions as exploited in the wild in 2024.

Microsoft-MSRC Feb 18, 2026

Signal Intelligence

Confidenceⓘ

78%

EPSS 1.49%

Mentions 1

Last Seen Feb 18, 2026

CNA Information

Analyst Note

CVE description explicitly states 'as exploited in the wild in 2024' and CVE was published 2024-09-04. The 2024 publication year combined with explicit documentation of wild exploitation in the same year indicates exploitation occurred contemporaneously with or before patch release, meeting zero-day criteria.

Triage Info

Decided atMar 05, 2026