Head-to-head
F5 vs HAProxy
F5 carries 23.9× the disclosed CVE volume of HAProxy. Volume reflects disclosure practice and install base as much as code quality — read it with the severity mix. Sourced from the NIST NVD; lower counts indicate a smaller disclosed vulnerability surface — not necessarily lower risk.
01
Disclosure record
Bars are normalized per row to the larger value; the leading count is emphasized.
| F5 | Metric | HAProxy | ||
|---|---|---|---|---|
| 860 | Total CVEs | 36 | ||
| 46 | Critical | 2 | ||
| 469 | High | 21 | ||
| 328 | Medium | 12 | ||
| 17 | Low | 1 | ||
| 349 | Open in latest | 12 | ||
| 3 | Product families | 1 |
02
Risk profile
Each severity band as a share of the vendor's own total — strips out raw volume so the profiles compare directly.
F5
5.3% critical- Critical
- 465.3%
- High
- 46954.5%
- Medium
- 32838.1%
- Low
- 172.0%
HAProxy
5.6% critical- Critical
- 25.6%
- High
- 2158.3%
- Medium
- 1233.3%
- Low
- 12.8%
03
Recent activity
Latest in-window disclosures per vendor, newest first. Each ID links to its NVD record.
F5
| CVE | Severity | CVSS | Published |
|---|---|---|---|
| CVE-2026-94127(opens NVD record) | Critical | 9.8 | Sep 22, 2026 |
| CVE-2026-63020(opens NVD record) | Low | 3.1 | Sep 2, 2026 |
| CVE-2026-60005(opens NVD record) | High | 8.2 | Jul 15, 2026 |
| CVE-2026-60065(opens NVD record) | Low | 3.7 | Jul 15, 2026 |
| CVE-2026-56434(opens NVD record) | Medium | 6.5 | Jul 15, 2026 |
| CVE-2026-55723(opens NVD record) | High | 8.3 | Jul 15, 2026 |
HAProxy
| CVE | Severity | CVSS | Published |
|---|---|---|---|
| CVE-2026-26081(opens NVD record) | Medium | 4.8 | Jul 20, 2026 |
| CVE-2026-26080(opens NVD record) | Low | 3.7 | Jul 20, 2026 |
| CVE-2026-55204(opens NVD record) | High | 7.5 | Jun 18, 2026 |
| CVE-2026-55203(opens NVD record) | High | 7.5 | Jun 18, 2026 |
| CVE-2026-33555(opens NVD record) | Medium | 4.0 | Apr 13, 2026 |
| CVE-2025-11230(opens NVD record) | High | 7.5 | Nov 19, 2025 |