Squid Software Foundation Squid

Name: Squid Software Foundation Squid
Brand: Squid Software Foundation

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

7critical35high25medium0low

updated 2026-10-27

vulnerabilities (72)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-31806US	medium6.5	95.3% (100th)	Exploit	no fix	2021-05-27	2 versions
CVE-2025-62168US	high7.5	63.4% (99th)	Exploit	no fix	2025-10-17	≤ 7.2
CVE-2016-2569US	high7.5	31.2% (98th)	Exploit	no fix	2016-02-27	2 versions
CVE-2025-54574US	critical9.8	24.0% (98th)	Exploit	no fix	2025-08-01	≤ 6.4
CVE-2021-31807US	medium6.5	15.6% (97th)	Exploit	no fix	2021-06-08	2 versions
CVE-2026-47729US	—	1.50% (74th)	Exploit	no fix	2026-07-16	≤ 7.6
CVE-2023-49285US	high7.5	88.1% (100th)	—	no fix	2023-12-04	≤ 6.5
CVE-2024-25617US	high7.5	88.1% (100th)	—	no fix	2024-02-14	≤ 6.5
CVE-2021-33620US	medium6.5	79.6% (100th)	—	no fix	2021-05-28	2 versions
CVE-2023-46847US	high7.5	78.5% (100th)	—	no fix	2023-11-03	3.2.0.1 → 6.4
CVE-2019-13345US	medium6.1	74.5% (99th)	—	no fix	2019-07-05	≤ 4.7
CVE-2020-8450US	high7.3	71.8% (99th)	—	no fix	2020-02-04	≤ 4.10
CVE-2021-28662US	medium6.5	71.8% (99th)	—	no fix	2021-05-27	2 versions
CVE-2024-25111US	high7.5	65.3% (99th)	—	no fix	2024-03-06	3.5.27 → 6.8
CVE-2024-23638US	medium6.5	60.1% (99th)	—	no fix	2024-01-24	2 versions
CVE-2023-50269US	high7.5	57.6% (99th)	—	no fix	2023-12-14	3 versions
CVE-2019-12527US	high8.8	49.0% (99th)	—	no fix	2019-07-11	4.0.23 → 4.7
CVE-2024-45802US	high7.5	47.9% (99th)	—	no fix	2024-10-28	≤ 7.0
CVE-2019-18679US	high7.5	41.0% (99th)	—	no fix	2019-11-26	3 versions
CVE-2020-11945US	critical9.8	27.2% (98th)	—	no fix	2020-04-23	3 versions
CVE-2016-2390US	medium5.9	25.6% (98th)	—	no fix	2016-04-19	2 versions
CVE-2019-12525US	critical9.8	24.4% (98th)	—	no fix	2019-07-11	2 versions
CVE-2015-5400US	medium6.8	20.8% (98th)	—	no fix	2015-09-28	≤ 3.5.6
CVE-2019-12526US	critical9.8	20.3% (97th)	—	no fix	2019-11-26	2 versions
CVE-2021-28116US	medium5.3	12.9% (96th)	—	no fix	2021-03-09	≤ 5.2
CVE-2018-1000027US	high7.5	12.9% (96th)	—	no fix	2018-02-09	≤ 4.0.23
CVE-2019-12854US	high7.5	11.7% (96th)	—	no fix	2019-08-15	4.0 → 4.7
CVE-2023-46848US	high7.5	10.5% (96th)	—	no fix	2023-11-03	5.0.3 → 6.4
CVE-2019-12528US	high7.5	10.5% (96th)	—	no fix	2020-02-04	≤ 4.10
CVE-2023-49286US	high7.5	10.4% (96th)	—	no fix	2023-12-04	≤ 6.5
CVE-2016-2572US	high7.5	10.2% (96th)	—	no fix	2016-02-27	4.0.1 → 4.0.7
CVE-2016-2571US	high7.5	9.29% (95th)	—	no fix	2016-02-27	2 versions
CVE-2019-18676US	high7.5	9.18% (95th)	—	no fix	2019-11-26	2 versions
CVE-2026-33526US	high7.5	9.08% (95th)	—	no fix	2026-03-26	≤ 7.5
CVE-2026-32748US	high7.5	9.06% (95th)	—	no fix	2026-03-26	≤ 7.5
CVE-2016-2570US	high7.5	8.95% (95th)	—	no fix	2016-02-27	2 versions
CVE-2020-8449US	high7.5	8.31% (95th)	—	no fix	2020-02-04	≤ 4.10
CVE-2019-12529US	medium5.9	8.09% (95th)	—	no fix	2019-07-11	3 versions
CVE-2021-28651US	high7.5	7.45% (94th)	—	no fix	2021-05-27	2 versions
CVE-2020-25097US	high8.6	7.34% (94th)	—	no fix	2021-03-19	2 versions
CVE-2019-18677US	medium6.1	7.24% (94th)	—	no fix	2019-11-26	4 versions
CVE-2020-8517US	high7.5	6.85% (94th)	—	no fix	2020-02-04	≤ 4.10
CVE-2019-12519US	critical9.8	6.72% (94th)	—	no fix	2020-04-15	3 versions
CVE-2023-46846US	medium5.3	6.60% (94th)	—	no fix	2023-11-03	2.6 → 6.4
CVE-2024-37894US	—	6.25% (94th)	—	no fix	2024-06-25	≤ 6.10
CVE-2019-18678US	medium5.3	6.20% (93rd)	—	no fix	2019-11-26	2 versions
CVE-2023-46728US	high7.5	5.96% (93rd)	—	no fix	2023-11-06	≤ 6.0.1
CVE-2019-12521US	medium5.9	5.91% (93rd)	—	no fix	2020-04-15	3 versions
CVE-2018-19132US	medium5.9	5.88% (93rd)	—	no fix	2018-11-09	≤ 4.4
CVE-2020-15049US	high8.8	5.71% (93rd)	—	no fix	2020-06-30	5 versions

showing 50 of 72

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation19 CVEs
CWE-787Out-of-bounds Write11 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer7 CVEs
CWE-125Out-of-bounds Read7 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')6 CVEs
CWE-190Integer Overflow or Wraparound4 CVEs
CWE-617Reachable Assertion4 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)70 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan