Skip to content
OriginalSign in
Image: SecurityOnline

SecurityOnlineDo Son

Critical Squid Proxy Vulnerabilities Patched in Latest Release

Part of the CVE-2026-47729 story · since 13 Jun

Quiet for 18 weekslast report 24 Jun4 articles3 outlets
13 Jun · SecurityOnline first23 Aug16 Sep10 OctNowThis article1st of 4
  • Sat 13 Jun, 04:18 UTC. SecurityOnline, first report. Critical Squid Proxy Vulnerabilities Patched in Latest Release. This article, 1st of 4.
  • Mon 22 Jun, 14:01 UTC. SecurityWeek, its first report on the story. Squidbleed bug leaks HTTP data via FTP flaw (CVE-2026-47729).
  • Tue 23 Jun, 08:33 UTC. Security Affairs, its first report on the story. Squidbleed flaw leaks user data via memory leak in proxy.
  • Wed 24 Jun, 02:01 UTC. SecurityOnline. Squid Proxy Flaw Exposes User Logins via FTP Parser Bug.

This alert discusses critical vulnerabilities identified in the Squid proxy software, including CVE-2026-47729 (out-of-bounds read) and CVE-2026-50012 (heap-based buffer overflow) that threaten system security. Administrators are urged to apply the latest patches immediately to safeguard against these risks. The most recent version available is Squid 7.6, which contains the necessary updates to fix these vulnerabilities.

How the story developed

All 4 articles
Quiet for 18 weekslast report 24 Jun4 articles3 outlets

4 articles from 3 outlets since 13 Jun. Quiet since 24 Jun. This was the first report.

Now13 Jun151719212325First reportSecurityOnline · 13 Jun, 04:18Picked up againafter 9 days quiet
  • Sat 13 Jun, 04:18 UTC. SecurityOnline, first report. Critical Squid Proxy Vulnerabilities Patched in Latest Release. This article, 1st of 4.
  • Mon 22 Jun, 14:01 UTC. SecurityWeek, its first report on the story. Squidbleed bug leaks HTTP data via FTP flaw (CVE-2026-47729).
  • Tue 23 Jun, 08:33 UTC. Security Affairs, its first report on the story. Squidbleed flaw leaks user data via memory leak in proxy.
  • Wed 24 Jun, 02:01 UTC. SecurityOnline. Squid Proxy Flaw Exposes User Logins via FTP Parser Bug.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 4 articles as a list
  1. Sat 13 JunDay 01
    1. Critical Squid Proxy Vulnerabilities Patched in Latest Release04:18 · SecurityOnline · First report · This article, 1st of 4

  2. Quiet for 9 days

    Mon 22 JunDay 91
    1. Squidbleed bug leaks HTTP data via FTP flaw (CVE-2026-47729)14:01 · SecurityWeek · Picked up again
  3. Tue 23 JunDay 101
    1. Squidbleed flaw leaks user data via memory leak in proxy08:33 · Security Affairs
  4. Wed 24 JunDay 111
    1. Squid Proxy Flaw Exposes User Logins via FTP Parser Bug02:01 · SecurityOnline

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in