Skip to content

Product

redhat/squid vulnerabilities

6 published CVES affecting redhat/squid, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
6
Critical
1
High
2
Medium
3
Low
0
Unscored
0
CISA KEV
0

Latest redhat/squid CVEs

Newest publication first

  1. CVE-2026-61642 Squid Request Smuggling in HTTP Transfer-Encoding

    Published
    HighCVSS 7.7 EPSS 2.0%

    Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a Request Smuggling attack against HTTP/1.1 Transfer-Encoding. HTTP header parsing (src/HttpHeader.cc) accepted the bare Transfer-En...

  2. CVE-2026-47729 Squid: Memory disclosure in FTP gateway

    Published
    MediumCVSS 6.5 EPSS 1.5%

    Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing form...

  3. CVE-2026-50012 Squid: Memory corruption in cache_digest reply handling

    Published
    MediumCVSS 5.5 EPSS 1.4%

    Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may be larger than the m...

  4. CVE-2026-33526 Squid vulnerable to Denial of Service in ICP Request handling

    Published
    CriticalCVSS 9.2 EPSS 9.3%

    Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid servic...

  5. CVE-2026-33515 Squid has issues in ICP message handling

    Published
    MediumCVSS 6.9 EPSS 1.1%

    Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information...

  6. CVE-2026-32748 Squid has Denial of Service in ICP Response handling

    Published
    HighCVSS 8.7 EPSS 9.3%

    Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.