CVE-2026-33515

Name of the Vulnerable Software and Affected Versions Squid versions prior to 7.5

Description Squid, a caching proxy for the Web, contains a flaw due to improper input validation when handling ICP traffic. This can lead to an out-of-bounds read, potentially exposing sensitive information to a remote attacker. The attack requires the Squid deployment to have ICP support enabled via a non-zero icp port configuration. Denying ICP queries using icp access rules does not resolve this issue.

Recommendations Update to version 7.5 or later.