tag
Squid
CVE-2025-62168
network
CRITICAL 10
EPSS 63%
Squid Proxy Sensitive Header Leak via Error Page `mailto:` Diagnostic Block (CVE-2025-62168)
When Squid is configured with emailerrdata enabled (including in default configurations), it embeds diagnostic details about a failed request — including the original client's HTTP request headers — into the auto-generated error page it returns. Specifically,…
Patched
2026-07-06
CVE-2026-47729
network
MEDIUM
Squidbleed — Squid Proxy FTP Gateway Out-of-Bounds Heap Read (CVE-2026-47729)
CVE-2026-47729, dubbed "Squidbleed," is an out-of-bounds heap read in Squid Proxy's FTP gateway and FTP directory-listing parser. The bug stems from legacy FTP parsing logic (originally written in 1997 for NetWare-style listings) in FtpGateway.cc, where…
Patched
2026-07-01