Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Squid proxy may let attackers bypass restrictions

published 4 days ago
Summary

Versions of the Squid HTTP caching proxy older than version 4 can be manipulated to bypass normal access controls. This could let an unauthorized user view or retrieve information that should be protected. Upgrade to version 4 or later, or apply the vendor’s recommended patches, to close the risk.

What to do
  • Update cleanstart squid to version 3.5.27-r2.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart squid < 3.5.27-r2
Fix: upgrade to 3.5.27-r2
Original advisory text
Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4
Security vulnerability affects the squid package. The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2025-EN68234 · OSV
Track software like this
Free during beta