Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-61642— Squid Request Smuggling in HTTP Transfer-Encoding

Quick assessment

Affected
squid-cache squid
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Squid 是一个用于 Web 的缓存代理服务器。从版本 3.3.0.1 到 7.6 之前的所有版本中，由于对行为工作流的不当执行存在漏洞，Squid 易受针对 HTTP/1.1 Transfer-Encoding 的攻击请求模糊攻击。HTTP 标头解析（ ）接受裸 身份形式，这在HTTP规范中被禁止，因为任何传输编码必须包裹在分块编码中。该问题允许受信任客户端在 HTTP/1.1 中执行 HTTP 请求模糊攻击，绕过攻击者与 Squid 之间的安全机制。当有 HTTP 缓存在受影响的 Squid 之前操作时，此请

CVSS 7.7 · High

Affected Version Matrix 1

VendorProduct Version RangeStatus
squid-cache squid >= 3.3.0.1, < 7.6 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-61642

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Squid Request Smuggling in HTTP Transfer-Encoding
Source: CVE Program / CVE List V5
Vulnerability Description
Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a Request Smuggling attack against HTTP/1.1 Transfer-Encoding. HTTP header parsing (`src/HttpHeader.cc`) accepted the bare` Transfer-Encoding:` identity form, which the HTTP specification prohibits because any transfer coding must be wrapped within chunked encoding. This problem allows a trusted client to perform an HTTP Request Smuggling attack when HTTP/1.1 is used, bypassing security mechanisms that may be in place between attacker and Squid. When there is an HTTP cache operating prior to the affected Squid, this Request Smuggling attack also allows the attacker to poison that web cache and store arbitrary malicious content at any URL for delivery to other clients' future requests. This issue is fixed in version 7.6.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
HTTP请求的解释不一致性(HTTP请求私运)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
squid-cache squid >= 3.3.0.1, < 7.6 -

II. Public POCs for CVE-2026-61642

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-61642

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-61642 (4)

Vendor Advisories for CVE-2026-61642 (1)

Vendor Pages for CVE-2026-61642 (1)

IV. Related Vulnerabilities

Same product: squid
Same vendor: squid-cache
Same weakness: CWE-444

V. Comments for CVE-2026-61642

No comments yet

Leave a comment