https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:32:17.957543+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-08611 bdu:2026-08611 2026-10-02T20:32:18.110423+00:00 bdu:2026-08611 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0795 certfr-2026-avi-0795 — De multiples vulnérabilités ont été découvertes dans Squid. Elles permettent à un attaquant de provoquer une atteinte à… 2026-10-02T20:32:18.110468+00:00 certfr-2026-avi-0795 https://cve.radiocsirt.org/vuln/euvd-2026-338574 EUVD-2026-338574 2026-10-02T20:32:18.110490+00:00 EUVD-2026-338574 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47729 fkie_cve-2026-47729 2026-10-02T20:32:18.110503+00:00

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-47729 msrc_CVE-2026-47729 — Squid: Memory disclosure in FTP gateway 2026-10-02T20:32:18.110546+00:00 msrc_CVE-2026-47729 https://cve.radiocsirt.org/vuln/oesa-2026-2726 OESA-2026-2726 — squid security update 2026-10-02T20:32:18.110567+00:00

Affected: openEuler:22.03-LTS-SP4: squid, openEuler:24.03-LTS-SP1: squid, openEuler:24.03-LTS-SP3: squid, openEuler:20.03-LTS-SP4: squid

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fix(es):

['Hi all,', "CVE-2026-47729\n\nDue to a Improper Validation of Syntactic Correctness of Input\nbug, Squid is vulnerable to a Out-of-bounds Read\nattack against the FTP gateway.\n\nThis problem allows a trusted client to perform an Out-of-Bounds\nRead from random unrelated transactions when accessing a\nmisbehaving FTP server through Squid's gateway feature.\n\n<", '>\n\n\n\nCVE-2026-50012\n\nDue to an Improper Input Validation bug, Squid is vulnerable to\na Heap-based Buffer Overflow attack against cache digests.\n\nThis problem allows a trusted server to perform a Heap-based\nBuffer Overflow when sending maliciously crafted replies to\ncache_digest request messages.\n\nThis attack is limited to Squid instances that have been\ncompiled with the --enable-cache-digests option.\n\n<', '>', 'Amos Jeffries\nThe Squid Software Foundation'](CVE-2026-47729)

['Hi all,', "CVE-2026-47729\n\nDue to a Improper Validation of Syntactic Correctness of Input\nbug, Squid is vulnerable to a Out-of-bounds Read\nattack against the FTP gateway.\n\nThis problem allows a trusted client to perform an Out-of-Bounds\nRead from random unrelated transactions when accessing a\nmisbehaving FTP server through Squid…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11937-1 openSUSE-SU-2026:11937-1 — squid-7.7-2.1 on GA media 2026-10-02T20:32:18.110617+00:00

squid-7.7-2.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-47729 UBUNTU-CVE-2026-47729 2026-10-02T20:32:18.110637+00:00

Affected: Ubuntu:Pro:16.04:LTS: squid3, Ubuntu:Pro:18.04:LTS: squid3, Ubuntu:Pro:20.04:LTS: squid, Ubuntu:22.04:LTS: squid, Ubuntu:24.04:LTS: squid, Ubuntu:25.10: squid, Ubuntu:26.04:LTS: squid

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1920 WID-SEC-W-2026-1920 — Squid: Mehrere Schwachstellen 2026-10-02T20:32:18.110670+00:00

Ein Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um Informationen offenzulegen und um einen nicht näher spezifizierten Angriff durchzuführen.