Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Squid Use After Free Vulnerability - CVE-2026-33526 - Vulnerability Database
Squid

Squid Use After Free Vulnerability - CVE-2026-33526

High
Reference: CVE-2026-33526
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-33526
Title: Squid Use After Free Vulnerability
Overview:

Squid is a caching proxy for the Web. Prior to version 7.5 due to heap Use-After-Free Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero icp_port). This problem _cannot_ be mitigated by denying ICP queries using icp_access rules. Version 7.5 contains a patch.