Red Hat Security Advisory: squid security update
Two denial of service vulnerabilities have been identified in Squid, a high-performance proxy caching server. These vulnerabilities involve a heap use-after-free issue and crafted ICP traffic handling flaws. The issues affect Squid as packaged in Red Hat Enterprise Linux 9.6 Extended Update Support and related variants. Red Hat has issued an important security advisory with updated packages to address these vulnerabilities.
AI Analysis
Technical Summary
Red Hat Product Security has disclosed two denial of service vulnerabilities in Squid related to ICP (Internet Cache Protocol) handling. CVE-2026-33526 is a heap use-after-free vulnerability, and CVE-2026-32748 involves denial of service via crafted ICP traffic. These vulnerabilities could cause service disruption when exploited. The advisory covers Red Hat Enterprise Linux 9.6 Extended Update Support and multiple architectures. Updated Squid packages (version 5.5-19.el9_6.3) have been released to remediate these issues.
Potential Impact
Successful exploitation of these vulnerabilities can result in denial of service conditions, causing Squid proxy servers to crash or become unresponsive. This impacts availability of proxy caching services for web clients relying on Squid. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated Squid packages (version 5.5-19.el9_6.3) for Red Hat Enterprise Linux 9.6 Extended Update Support and related variants that fix these vulnerabilities. Users should apply these official updates promptly to remediate the issues. Refer to Red Hat advisory RHSA-2026:9220 and https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigations are indicated by the vendor advisory.
Red Hat Security Advisory: squid security update
Description
Two denial of service vulnerabilities have been identified in Squid, a high-performance proxy caching server. These vulnerabilities involve a heap use-after-free issue and crafted ICP traffic handling flaws. The issues affect Squid as packaged in Red Hat Enterprise Linux 9.6 Extended Update Support and related variants. Red Hat has issued an important security advisory with updated packages to address these vulnerabilities.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat Product Security has disclosed two denial of service vulnerabilities in Squid related to ICP (Internet Cache Protocol) handling. CVE-2026-33526 is a heap use-after-free vulnerability, and CVE-2026-32748 involves denial of service via crafted ICP traffic. These vulnerabilities could cause service disruption when exploited. The advisory covers Red Hat Enterprise Linux 9.6 Extended Update Support and multiple architectures. Updated Squid packages (version 5.5-19.el9_6.3) have been released to remediate these issues.
Potential Impact
Successful exploitation of these vulnerabilities can result in denial of service conditions, causing Squid proxy servers to crash or become unresponsive. This impacts availability of proxy caching services for web clients relying on Squid. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated Squid packages (version 5.5-19.el9_6.3) for Red Hat Enterprise Linux 9.6 Extended Update Support and related variants that fix these vulnerabilities. Users should apply these official updates promptly to remediate the issues. Refer to Red Hat advisory RHSA-2026:9220 and https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigations are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:9220
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-33526"]
- Cvss Version
- null
Threat ID: 6a160981e29bf47b5064e5c3
Added to database: 05/26/2026, 20:58:41 UTC
Last enriched: 06/27/2026, 23:27:12 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 107
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.