Vulnerabilities

TI-2026-71911 CVE-2026-61642

Request smuggling in Squid HTTP Transfer-Encoding handling

LOW 38

Squid is a caching proxy for the Web.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.02037 Published 2026-10-13 Partial fix · 7.6 CWE-444

TI-2026-35230 CVE-2026-47729

Squid: Memory disclosure in FTP gateway

LOW 32

Squid is a caching proxy for the Web.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01503 Published 2026-07-16 Partial fix · 7.6 CWE-125

TI-2026-36838 CVE-2026-50012

Squid: Memory corruption in cache_digest reply handling

LOW 28

Squid is a caching proxy for the Web.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01364 Published 2026-07-16 Partial fix · 7.6 CWE-122

TI-2026-25919 CVE-2026-33526

Squid vulnerable to Denial of Service in ICP Request handling

MEDIUM 57

Squid is a caching proxy for the Web.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.09076 Published 2026-03-26 Partial fix · 7.5 CWE-416

TI-2026-25911 CVE-2026-33515

Squid has issues in ICP message handling

LOW 39

Squid is a caching proxy for the Web.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01058 Published 2026-03-26 Partial fix · 7.5 CWE-125

TI-2026-25239 CVE-2026-32748

Squid has Denial of Service in ICP Response handling

MEDIUM 55

Squid is a caching proxy for the Web.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.09065 Published 2026-03-26 Partial fix · 7.5 CWE-413

TI-2025-38486 CVE-2025-62168

Squid vulnerable to information disclosure via authentication credential leakage in error handling

CRITICAL 85

Squid is a caching proxy for the Web.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.64816 Published 2025-10-17 Partial fix · 7.2 CWE-209

TI-2025-36921 CVE-2025-59362 · GHSA-jh85-mgr3-8f33

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs.

LOW 19

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00389 Published 2025-09-26 Fix deferred CWE-121

TI-2025-34351 CVE-2025-54574

Squid's URN Handling can lead to Buffer Overflow

HIGH 68

Squid is a caching proxy for the Web.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22133 Published 2025-08-01 Partial fix · 6.4 CWE-122

TI-2024-30769 CVE-2024-45802

Squid Denial of Service

HIGH 69

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.47879 Published 2024-10-28 Partial fix · 6.10 CWE-20

TI-2024-25210 CVE-2024-37894

Squid vulnerable to heap corruption in ESI assign

LOW 37

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.06255 Published 2024-06-25 Partial fix CWE-787

TI-2024-16566 CVE-2024-25111

SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

HIGH 79

Squid is a web proxy cache.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.65254 Published 2024-03-06 Fixed in 6.8 CWE-674

TI-2024-16845 CVE-2024-25617

Denial of Service in HTTP Header parser in squid proxy

HIGH 81

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.88094 Published 2024-02-14 Partial fix · 6.5 CWE-182

TI-2024-15657 CVE-2024-23638

SQUID-2023:11 Denial of Service in Cache Manager

MEDIUM 63

Squid is a caching proxy for the Web.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.6005 Published 2024-01-23 Partial fix · 6.6 CWE-825

TI-2023-27496 CVE-2023-50269

SQUID-2023:10 Denial of Service in HTTP Request parsing

HIGH 77

Squid is a caching proxy for the Web.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.57627 Published 2023-12-14 Partial fix · 6.6 CWE-674

TI-2023-26921 CVE-2023-49285

Denial of Service in HTTP Message Processing in Squid

HIGH 79

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.88144 Published 2023-12-04 Partial fix · 6.5 CWE-126

TI-2023-26922 CVE-2023-49286

Denial of Service in Helper Process management

MEDIUM 50

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.10352 Published 2023-12-04 Partial fix · 6.5 CWE-253

TI-2023-26924 CVE-2023-49288

Denial of Service in HTTP Collapsed Forwarding in Squid

MEDIUM 51

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.04777 Published 2023-12-04 Partial fix · 6.0.1 CWE-416

TI-2023-25211 CVE-2023-46728

SQUID-2021:8 Denial of Service in Gopher gateway

MEDIUM 45

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03775 Published 2023-11-06 Partial fix · 6.0.1 CWE-476

TI-2023-25306 CVE-2023-46847

Squid: denial of service in http digest authentication

HIGH 77

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.78513 Published 2023-11-03 Fixed in 6.4, 7:3.4.14-15.el6_10.1 +13 CWE-120

TI-2023-25307 CVE-2023-46848

Squid: denial of service in ftp

MEDIUM 51

Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.11376 Published 2023-11-03 Fixed in 6.4, 7:5.5-5.el9_2.1 +2 CWE-681

TI-2023-05360 CVE-2023-5824

Squid: dos against http and https

LOW 39

A flaw was found in Squid.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03284 Published 2023-11-03 Partial fix · 8090020231130092412.a75119d5, 8020020240122164331.4cda2c84 +6 CWE-755

TI-2023-25305 CVE-2023-46846

Squid: request/response smuggling in http/1.1 and icap

MEDIUM 56

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.07158 Published 2023-11-03 Partial fix · 6.4, 7:3.5.20-17.el7_9.13 +9 CWE-444

TI-2023-25207 CVE-2023-46724

SQUID-2023:4 Denial of Service in SSL Certificate validation

MEDIUM 48

Squid is a caching proxy for the Web.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02807 Published 2023-11-01 Partial fix · 6.4 CWE-125

TI-2022-19815 CVE-2022-41318

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6.

MEDIUM 43

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.03084 Published 2022-12-25 Partial fix CWE-190

Vulnerabilities

Filters