CVE-2026-61642: squid >= 3.3.0.1, < 7.6

Affected technology

squid · >= 3.3.0.1, < 7.6
squid-cache

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

The source says when there is an HTTP cache operating prior to the affected Squid, this Request Smuggling attack also allows the attacker to poison that web cache and store arbitrary malicious content at any URL for delivery to other clients' future requests. Vendor/CNA’s CVSS 3.1 assessment (base score 7.7/10) rates confidentiality and availability impact as none; integrity impact as high.