Skip to content
Multiple Vulnerabilities in Squid Affect Ubuntu Systems

Multiple Vulnerabilities in Squid Affect Ubuntu Systems

First seen 21 Oct 2026, 01:17 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 21, 2026 at 02:20 UTC

Several vulnerabilities were discovered in Squid, a web proxy cache server, affecting Ubuntu 16.04 LTS, 18.04 LTS, and 20.04 LTS. Notably, CVE-2026-61642 allows HTTP request smuggling, while CVE-2026-50012 can lead to a denial of service via buffer overflow. CVE-2026-47729 exposes sensitive information through improper handling of FTP directory listings. The issues were disclosed on October 13, 2026, and patches are available for affected systems. Administrators are urged to update their systems to mitigate these risks. The vulnerabilities have varying CVSS scores, with CVE-2026-61642 rated as high at 7.7.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-03-26
CVE-2026-33515 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-26
CVE-2026-32748 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-26
CVE-2026-33526 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-22
Public exploit for CVE-2026-47729 released
A proof-of-concept exploit appeared on GitHub, lowering the barrier for opportunistic attackers.
GitHub
2026-07-16
CVE-2026-50012 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
Vulnerabilities disclosed
Multiple vulnerabilities in Squid were disclosed, including CVE-2026-61642 and CVE-2026-50012, affecting Ubuntu systems.
Ubuntu
2026-10-13
CVE-2026-61642 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-20
Patches released
Ubuntu released patches for Squid vulnerabilities, urging users to update their systems promptly.
Linuxsecurity

More articles in this cluster (3)

Following this threat?

Track Ubuntu and CVE-2026-32748 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

Which versions of Ubuntu are affected?
Ubuntu 16.04 LTS, 18.04 LTS, and 20.04 LTS are affected by the vulnerabilities.
What should I do to protect my systems?
Update your Squid installation to the latest patched version as soon as possible.
Are these vulnerabilities being actively exploited?
No confirmed active exploitation has been reported for these vulnerabilities as of now.