Multiple critical Squid proxy vulnerabilities, including CVE-2026-61642, allow request smuggling and buffer overflows. Patch your servers immediately.
Squid
A critical heap buffer overflow (CVE-2025-54574, CVSS 9.3) in Squid allows unauthenticated RCE and information leakage when processing URN requests.
Find out how CVE-2024-45802, a DoS vulnerability, impacts Squid, the popular caching proxy server. Stay informed to protect your system.
A vulnerability (CVE-2024-25111, CVSS 8.6) has been uncovered that could allow malicious actors to cripple Squid-powered systems
Squid, the widely used web proxy and caching server, is facing a high-severity Denial of Service (DoS) vulnerability (CVE-2024-25617)
This vulnerability stems from a discrepancy in chunked decoder lenience, making Squid susceptible to Request/Response smuggling attacks
In February 2021, security expert Joshua Rogers undertook an analysis of Squid, discerning 55 vulnerabilities within the project's code.