Squid Vulnerabilities Allow Denial of Service Attacks

CERT-Bund has released a security advisory (WID-SEC-2026-0854) detailing multiple vulnerabilities in the open-source web proxy cache software, Squid. The vulnerabilities, rated with a high CVSS base score of 8.6, allow remote, anonymous attackers to exploit the software and cause a Denial of Service (DoS) condition. The advisory specifically affects Squid versions prior to 7.5 running on Linux, UNIX, and Windows operating systems.

Organizations utilizing Squid are advised to review the advisory and implement mitigation strategies as soon as possible to prevent potential DoS attacks. While the advisory does not specify a compliance deadline, prompt patching or updating to a secure version is critical to maintaining service availability and protecting network infrastructure. Failure to address these vulnerabilities could lead to significant service disruptions.