Skip to content
Sign in

squid-cache product

squid

Alert
No squid CVE is in the CISA KEV catalogue.

Tracked since 13 Jun · latest article 16 Sep · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date

No squid CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds squid CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a squid CVE to KEV.

Fix listed

0 of 3 CVEs in coverage

3 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-61642: 81.1th percentileCVE-2026-47729: 74.3th percentileCVE-2026-50012: 71.8th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-6164281.1
CVE-2026-4772974.3
CVE-2026-5001271.8

Coverage5 articles · all time

The latest 5 articles naming squid, in the shared story grammar.

Full timeline
Quiet for 6 weekslast report 16 Sep5 articles3 outlets

5 articles from 3 outlets since 13 Jun. Quiet since 16 Sep.

Now13 Jun161820222415 SepFirst reportSecurityOnline · 13 Jun, 04:18Picked up againafter 9 days quietPicked up againafter 12 weeks quiet
  • Sat 13 Jun, 04:18 UTC. SecurityOnline, first report. Critical Squid Proxy Vulnerabilities Patched in Latest Release.
  • Mon 22 Jun, 14:01 UTC. SecurityWeek, its first report on the story. Squidbleed bug leaks HTTP data via FTP flaw (CVE-2026-47729).
  • Tue 23 Jun, 08:33 UTC. Security Affairs, its first report on the story. Squidbleed flaw leaks user data via memory leak in proxy.
  • Wed 24 Jun, 02:01 UTC. SecurityOnline. Squid Proxy Flaw Exposes User Logins via FTP Parser Bug.
  • Wed 16 Sep, 02:00 UTC. SecurityOnline. Squid Proxy Flaws Enable Cache Poisoning and Out of Bounds Writes.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 5 articles as a list
  1. Sat 13 JunDay 01
    1. Critical Squid Proxy Vulnerabilities Patched in Latest Release04:18 · SecurityOnline · First report

  2. Quiet for 9 days

    Mon 22 JunDay 91
    1. Squidbleed bug leaks HTTP data via FTP flaw (CVE-2026-47729)14:01 · SecurityWeek · Picked up again
  3. Tue 23 JunDay 101
    1. Squidbleed flaw leaks user data via memory leak in proxy08:33 · Security Affairs
  4. Wed 24 JunDay 111
    1. Squid Proxy Flaw Exposes User Logins via FTP Parser Bug02:01 · SecurityOnline

  5. Quiet for 12 weeks

    Wed 16 SepDay 951
    1. Squid Proxy Flaws Enable Cache Poisoning and Out of Bounds Writes02:00 · SecurityOnline · Picked up again

All CVEs in coverage3

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-61642

    Squid Request Smuggling in HTTP Transfer-Encoding

    7.7High2.0% EPSS · 1 article
  • CVE-2026-47729

    Squid: Memory disclosure in FTP gateway

    6.5Medium1.5% EPSS · 4 articles
  • CVE-2026-50012

    Squid: Memory corruption in cache_digest reply handling

    5.5Medium1.4% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in