Description
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.
Published: 2026-07-16
Score: 6.5 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A flaw in Squid’s FTP gateway allows an authenticated, trusted client to trigger an out‑of‑bounds read. This memory disclosure can reveal data from random transactions. The weakness originates from improper input validation and is classified as CWE‑125, which may expose sensitive information read from memory.

Affected Systems

All installations of the Squid caching proxy that enable the FTP gateway feature are affected. No specific version range is supplied, so users should examine their version and compare it against the advisory for the fix.

Risk and Exploitability

The CVSS score of 6.5 indicates a moderate risk. EPSS is not available and the vulnerability is not listed in CISA KEV. Exploitation requires an authenticated client with access to the FTP gateway, so only users with legitimate credentials and trusted network positions could leverage this weakness to read arbitrary memory.

Generated by OpenCVE AI on June 26, 2026 at 01:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Squid to the latest version that contains the patch for the FTP gateway out‑of‑bounds read.
  • If an upgrade cannot be performed immediately, disable the FTP gateway feature or restrict its use to trusted networks only.
  • Limit authentication to authorized clients and, if feasible, eliminate FTP traffic through Squid to mitigate potential exposure.

Generated by OpenCVE AI on June 26, 2026 at 01:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6360-1 squid security update
History

Thu, 16 Jul 2026 16:30:00 +0000

Type Values Removed Values Added
Description A flaw was found in Squid. Due to improper input validation, an out-of-bounds read can occur in the FTP gateway. This issue allows an authenticated and trusted client to read memory from random transactions when accessing a misbehaving FTP server using the Squid gateway feature. Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.
Title squid: memory disclosure in FTP gateway Squid: Memory disclosure in FTP gateway
Weaknesses CWE-1289
References

Fri, 26 Jun 2026 06:00:00 +0000

Type Values Removed Values Added
First Time appeared Squid-cache
Squid-cache squid
Vendors & Products Squid-cache
Squid-cache squid

Fri, 26 Jun 2026 00:15:00 +0000

Type Values Removed Values Added
Description A flaw was found in Squid. Due to improper input validation, an out-of-bounds read can occur in the FTP gateway. This issue allows an authenticated and trusted client to read memory from random transactions when accessing a misbehaving FTP server using the Squid gateway feature.
Title squid: memory disclosure in FTP gateway
Weaknesses CWE-125
References
Metrics threat_severity

None

 cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

threat_severity

Moderate

Subscriptions

Squid-cache Squid
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-07-16T16:13:19.767Z

Reserved: 2026-05-19T21:29:25.483Z

Link: CVE-2026-47729

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-06-23T00:00:00Z

Links: CVE-2026-47729 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-06-26T05:45:04Z

Weaknesses
  • CWE-125

    Out-of-bounds Read

  • CWE-1289

    Improper Validation of Unsafe Equivalence in Input