https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:13:19.130529+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:19107 ALSA-2025:19107 — Important: squid:4 security update 2026-10-04T04:13:19.629549+00:00

Affected: AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel, AlmaLinux:8: squid

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

Security Fix(es):

* squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-13226 bdu:2025-13226 2026-10-04T04:13:19.629626+00:00 bdu:2025-13226 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0889 certfr-2025-avi-0889 — Une vulnérabilité a été découverte dans Squid. Elle permet à un attaquant de provoquer une atteinte à la confidentialit… 2026-10-04T04:13:19.629643+00:00 certfr-2025-avi-0889 https://cve.radiocsirt.org/vuln/euvd-2026-271500 EUVD-2026-271500 2026-10-04T04:13:19.629659+00:00 EUVD-2026-271500 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62168 fkie_cve-2025-62168 2026-10-04T04:13:19.629670+00:00

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-62168 msrc_CVE-2025-62168 — Squid vulnerable to information disclosure via authentication credential leakage in error handling 2026-10-04T04:13:19.629696+00:00 msrc_CVE-2025-62168 https://cve.radiocsirt.org/vuln/oesa-2025-2531 OESA-2025-2531 — squid security update 2026-10-04T04:13:19.629712+00:00

Affected: openEuler:24.03-LTS: squid

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fix(es):

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15715-1 openSUSE-SU-2025:15715-1 — squid-7.3-1.1 on GA media 2026-10-04T04:13:19.629739+00:00

squid-7.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:19114 RHSA-2025:19114 — Red Hat Security Advisory: squid security update 2026-10-04T04:13:19.629755+00:00

squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling

 https://cve.radiocsirt.org/vuln/suse-su-2025:4029-1 SUSE-SU-2025:4029-1 — Security update for squid 2026-10-04T04:13:19.629771+00:00

Security update for squid

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-62168 UBUNTU-CVE-2025-62168 2026-10-04T04:13:19.629785+00:00

Affected: Ubuntu:Pro:16.04:LTS: squid3, Ubuntu:Pro:18.04:LTS: squid3, Ubuntu:Pro:20.04:LTS: squid, Ubuntu:22.04:LTS: squid, Ubuntu:24.04:LTS: squid, Ubuntu:25.10: squid

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2334 WID-SEC-W-2025-2334 — Squid: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Offenlegung von Informationen 2026-10-04T04:13:19.629814+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Squid ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.