https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:49:14.320464+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15339 bdu:2026-15339 2026-10-04T03:49:14.437093+00:00 bdu:2026-15339 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0795 certfr-2026-avi-0795 — De multiples vulnérabilités ont été découvertes dans Squid. Elles permettent à un attaquant de provoquer une atteinte à… 2026-10-04T03:49:14.437141+00:00 certfr-2026-avi-0795 https://cve.radiocsirt.org/vuln/euvd-2026-338472 EUVD-2026-338472 2026-10-04T03:49:14.437174+00:00 EUVD-2026-338472 https://cve.radiocsirt.org/vuln/fkie_cve-2026-50012 fkie_cve-2026-50012 2026-10-04T03:49:14.437202+00:00

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests option and configured with cache_peer entries. This issue is fixed in version 7.6.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-50012 msrc_CVE-2026-50012 — Squid: Memory corruption in cache_digest reply handling 2026-10-04T03:49:14.437276+00:00 msrc_CVE-2026-50012 https://cve.radiocsirt.org/vuln/oesa-2026-2726 OESA-2026-2726 — squid security update 2026-10-04T03:49:14.437311+00:00

Affected: openEuler:22.03-LTS-SP4: squid, openEuler:24.03-LTS-SP1: squid, openEuler:24.03-LTS-SP3: squid, openEuler:20.03-LTS-SP4: squid

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fix(es):

['Hi all,', "CVE-2026-47729\n\nDue to a Improper Validation of Syntactic Correctness of Input\nbug, Squid is vulnerable to a Out-of-bounds Read\nattack against the FTP gateway.\n\nThis problem allows a trusted client to perform an Out-of-Bounds\nRead from random unrelated transactions when accessing a\nmisbehaving FTP server through Squid's gateway feature.\n\n<", '>\n\n\n\nCVE-2026-50012\n\nDue to an Improper Input Validation bug, Squid is vulnerable to\na Heap-based Buffer Overflow attack against cache digests.\n\nThis problem allows a trusted server to perform a Heap-based\nBuffer Overflow when sending maliciously crafted replies to\ncache_digest request messages.\n\nThis attack is limited to Squid instances that have been\ncompiled with the --enable-cache-digests option.\n\n<', '>', 'Amos Jeffries\nThe Squid Software Foundation'](CVE-2026-47729)

['Hi all,', "CVE-2026-47729\n\nDue to a Improper Validation of Syntactic Correctness of Input\nbug, Squid is vulnerable to a Out-of-bounds Read\nattack against the FTP gateway.\n\nThis problem allows a trusted client to perform an Out-of-Bounds\nRead from random unrelated transactions when accessing a\nmisbehaving FTP server through Squid…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11937-1 openSUSE-SU-2026:11937-1 — squid-7.7-2.1 on GA media 2026-10-04T03:49:14.437359+00:00

squid-7.7-2.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-50012 UBUNTU-CVE-2026-50012 2026-10-04T03:49:14.437393+00:00

Affected: Ubuntu:Pro:16.04:LTS: squid3, Ubuntu:Pro:18.04:LTS: squid3, Ubuntu:Pro:20.04:LTS: squid, Ubuntu:22.04:LTS: squid, Ubuntu:24.04:LTS: squid, Ubuntu:25.10: squid, Ubuntu:26.04:LTS: squid

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests option and configured with cache_peer entries. This issue is fixed in version 7.6.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1920 WID-SEC-W-2026-1920 — Squid: Mehrere Schwachstellen 2026-10-04T03:49:14.437453+00:00

Ein Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um Informationen offenzulegen und um einen nicht näher spezifizierten Angriff durchzuführen.