Sploitus

64 exploited vulnerabilities in Squid

Showing 1–50 of 64, highest-scoring first

Vendors
Alt Linux, Almalinux, Centos, Debian, Linux Mint, Red Hat
With known exploits
64
Affected Squid-cache Squid versions
< 7.2, 4.7, 6.4, 4.15, 5.0.6
Affected Squid versions
= 2.0_patch2, 2.1_patch2, 2.3_stable5, 2.4, 2.4_stable7, 2.5_stable3, 2.5_stable4, 2.4_9, 2.4_stable_3
Affected Redhat Linux versions
= 5.2, 6.0

Vulnerabilities with exploits

Highest CVSS first — 9 of these already have exploit code on Sploitus

CVE-2025-62168 1 exploit
CVSS 10.0 CRITICAL 2025-09-14FIX AVAILABLE
Exploit for Server-generated Error Message Containing Sensitive Information in Squid-Cache Squid
CVE-2019-12527
CVSS 10.0 HIGH 2019-07-11FIX AVAILABLE
CVE-2025-54574 1 exploit
CVSS 9.8 CRITICAL 2023-11-22FIX AVAILABLE
Exploit for Out-of-bounds Write in Squid-Cache Squid
CVE-2019-12526
CVSS 9.8 CRITICAL 2019-11-14FIX AVAILABLE
CVE-2023-46846
CVSS 9.3 CRITICAL 2023-10-19
CVE-2026-33526
CVSS 9.2 CRITICAL 2026-01-01FIX AVAILABLE
CVE-2023-46847
CVSS 9.0 HIGH 2023-10-19
CVE-2026-32748
CVSS 8.7 HIGH 2026-01-01FIX AVAILABLE
CVE-2024-25111
CVSS 8.6 HIGH 2023-10-12FIX AVAILABLE
CVE-2023-49288
CVSS 8.6 HIGH 2023-11-22FIX AVAILABLE
CVE-2023-50269
CVSS 8.6 HIGH 2023-10-12FIX AVAILABLE
CVE-2023-49285
CVSS 8.6 HIGH 2023-11-24FIX AVAILABLE
CVE-2023-49286
CVSS 8.6 HIGH 2023-11-24FIX AVAILABLE
CVE-2023-46848
CVSS 8.6 HIGH 2023-10-19
CVE-2023-46724
CVSS 8.6 HIGH 2023-11-01FIX AVAILABLE
CVE-2022-41318
CVSS 8.6 HIGH 2022-09-18FIX AVAILABLE
CVE-2020-25097
CVSS 8.6 HIGH 2021-03-12FIX AVAILABLE
CVE-2024-45802
CVSS 7.8 HIGH 2024-10-28FIX AVAILABLE
CVE-2024-25617
CVSS 7.8 HIGH 2023-10-12FIX AVAILABLE
CVE-2023-46728
CVSS 7.8 HIGH 2023-09-26FIX AVAILABLE
CVE-2023-5824
CVSS 7.8 HIGH 2023-10-19
CVE-2021-28662
CVSS 7.8 HIGH 2021-05-10FIX AVAILABLE
CVE-2021-28652
CVSS 7.8 HIGH 2021-05-10FIX AVAILABLE
CVE-2021-28651
CVSS 7.5 HIGH 2021-05-10FIX AVAILABLE
CVE-2016-4555
CVSS 7.5 HIGH 2014-05-05FIX AVAILABLE
CVE-2016-3948
CVSS 7.5 HIGH 2014-04-24FIX AVAILABLE
CVE-2016-2569
CVSS 7.5 HIGH 2014-04-24FIX AVAILABLE
CVE-2016-2570
CVSS 7.5 HIGH 2014-04-24FIX AVAILABLE
CVE-2016-2571
CVSS 7.5 HIGH 2014-04-24FIX AVAILABLE
CVE-2016-2572
CVSS 7.5 HIGH 2016-02-27FIX AVAILABLE
CVE-2004-0189 1 exploit
CVSS 7.5 HIGH 2004-03-15FIX AVAILABLE
Squid Proxy 2.4/2.5 - NULL URL Character Unauthorized Access
CVE-2002-0163 1 exploit
CVSS 7.5 HIGH 2002-03-26FIX AVAILABLE
Squid 2.4.1 - Remote Buffer Overflow
CVE-2002-0068 1 exploit
CVSS 7.5 HIGH 2002-03-08
Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow
CVE-1999-0710 1 exploit
CVSS 7.5 HIGH 1999-07-25FIX AVAILABLE
Squid Web Proxy 2.2 - 'cachemgr.cgi' Unauthorized Connection
CVE-2026-33515
CVSS 6.9 MEDIUM 2026-01-01FIX AVAILABLE
CVE-2024-43371
CVSS 6.8 MEDIUM 2024-08-21FIX AVAILABLE
CVE-2024-23638
CVSS 6.8 MEDIUM 2024-01-23FIX AVAILABLE
CVE-2022-41317
CVSS 6.8 MEDIUM 2022-09-18FIX AVAILABLE
CVE-2021-31806 2 exploits
CVSS 6.8 MEDIUM 2021-05-10FIX AVAILABLE
Squid Proxy Range Header Denial of ServiceSquid Proxy Range Header DoS
CVE-2021-31808
CVSS 6.8 MEDIUM 2021-05-10FIX AVAILABLE
CVE-2015-5400
CVSS 6.8 MEDIUM 2015-04-15FIX AVAILABLE
CVE-2014-6270
CVSS 6.8 MEDIUM 2014-04-24
CVE-2021-33620
CVSS 6.5 MEDIUM 2021-05-28FIX AVAILABLE
CVE-2021-31807 2 exploits
CVSS 6.5 MEDIUM 2021-05-24FIX AVAILABLE
Squid Proxy Range Header Denial of ServiceSquid Proxy Range Header DoS
CVE-2014-7142
CVSS 6.4 MEDIUM 2014-04-24FIX AVAILABLE
CVE-2014-7141
CVSS 6.4 MEDIUM 2014-04-24FIX AVAILABLE
CVE-2024-37894
CVSS 6.3 MEDIUM 2024-06-25
CVE-2019-13345
CVSS 6.1 MEDIUM 2019-07-05FIX AVAILABLE
CVE-2018-19131 1 exploit
CVSS 6.1 MEDIUM 2018-11-09FIX AVAILABLE
Exploit for Cross-site Scripting in Squid-Cache Squid
CVE-2018-19132
CVSS 5.9 MEDIUM 2018-10-29FIX AVAILABLE