VulnSocial

CVE-2026-33515Disclosure(squid-cache / squid)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch squid-cache squid systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding with errors to invalid ICP requests. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem cannot be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch.

squid-cache CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-125CWE-1289

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • squid

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 3 classified signals
  • Peaked 2d ago at 2 mentions (2026-03-26); latest day: 1
  • 4 total mentions across 3 days

Affected systems

Vendors
squid-cache
Products
squid

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-03-26: 2Mentions · 2026-03-27: 1Mentions · 2026-03-28: 1Patch / Workaround · 2026-03-26: 1Technical Details · 2026-03-26: 2Technical Details · 2026-03-27: 1Technical Details · 2026-03-28: 103-2603-2703-28
Signal classification2 categories
Disclosure
375.0%
Patch
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-03-262
Disclosure1Patch1
2026-03-271
Disclosure1
2026-03-281
Disclosure1
Full discourse4 posts
  • Open Source Security mailing list@oss_security
    Disclosure

    Squid Proxy Cache Security Update Advisories https://www.openwall.com/lists/oss-security/2026/03/25/ CVE-2026-33526,SQUID-2026:1 and CVE-2026-32748,SQUID-2026:2 Denial of Service in ICP Request handling (heap Use-After-Free bugs) CVE-2026-33515,SQUID-2026:3 Out of Bounds Read in ICP message handling (infoleak)

    Post summary

    New Squid Proxy Cache vulnerabilities (CVE-2026-33526, CVE-2026-32748, CVE-2026-33515) are disclosed, detailing heap use‑after‑free and out‑of‑bounds read bugs in ICP handling.

    00060364
    4.4K followersView on X
  • White Rabbitx@TheRabbitPy
    Patch

    🛡️ Squid proxies under fire: CVE-2026-33526 (Critical) DoS via malformed ICP queries crashes workers. Chain w/ CVE-2026-32748 & CVE-2026-33515 for max disruption. Update Squid branches NOW. Fresh alert Mar 25-26! https://www.squid-cache.org/Advisory/SQUID-2026-3.txt

    Post summary

    The advisory reports critical DoS vulnerabilities in Squid proxies and urges users to apply the latest updates immediately.

    0001049
    492 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-33515 Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. Thi… https://www.cve.org/CVERecord?id=CVE-2026-33515

    Post summary

    The text announces CVE-2026-33515 affecting Squid before version 7.5, describing a vulnerability that causes an out‑of‑bounds read via ICP traffic.

    00010121
    56.8K followersView on X
  • Autumn Good@autumn_good_35
    Disclosure

    CVE-2026-33515、Moderate SQUID-2026:3 Out of Bounds Read in ICP message handling · Advisory · squid-cache/squid · GitHub https://github.com/squid-cache/squid/security/advisories/GHSA-84p4-hcx7-jj7c

    Post summary

    The post alerts to CVE‑2026‑33515, a moderate out‑of‑bounds read vulnerability in Squid’s ICP message handling, and links to a GitHub advisory, but does not provide PoC, exploit, or patch details.

    00000314
    6.8K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsquid-cachesquid---

Explore more

Back to dashboardsquid-cache CVEssquid vulnerabilities