CVE-2026-32748 Squid Cache CVE debrief

Who should care

Organizations using Squid for caching and content filtering should prioritize patching this vulnerability. The vulnerability's high CVSS score of 8.7 indicates a significant risk of Denial of Service attacks. ICP support must be explicitly enabled for the vulnerability to be exploitable.

Technical summary

The vulnerability in Squid arises from two primary issues: premature release of resources during their expected lifetime and heap Use-After-Free bugs. These issues are particularly problematic when handling ICP (Internet Cache Protocol) traffic. An attacker can exploit these vulnerabilities to launch a Denial of Service attack against Squid services that have ICP support enabled. The vulnerability is addressed in Squid version 7.5, which fixes the mentioned bugs.

Defensive priority

Patching this vulnerability should be a high priority for organizations using affected versions of Squid. Given the high severity and the potential for reliable Denial of Service attacks, defenders should act quickly to update Squid to version 7.5 or apply other mitigations as recommended by the vendor.

Recommended defensive actions

• Patch Squid to version 7.5 or later.
• Disable ICP support if not required.
• Review and update ICP access controls.
• Monitor Squid services for unusual activity.
• Implement additional security measures to protect against Denial of Service attacks.

Evidence notes

The CVE record and NVD detail provide comprehensive information about the vulnerability, including its description, CVSS score, and affected versions. Vendor references and advisories offer guidance on patching and mitigation strategies.

Official resources