vulnerability
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
Medium
Summary
A 29-year-old vulnerability, dubbed Squidbleed (CVE-2026-47729), exists in the Squid web proxy due to a heap over-read. This allows an attacker with proxy access to leak cleartext HTTP requests, including credentials and session tokens, by exploiting a flawed FTP parsing mechanism. While no in-the-wild exploitation has been reported, the vulnerability poses a moderate risk due to the need for proxy access and potential confidentiality breaches.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data