Critical Security Update for Squid and libecap Packages: CVE-2026-32748 and CVE-2026-33526
Summary
RHSA-2026:20565: Red Hat Security Advisory: squid:4 security update. Affects libecap versions < 0:1.0.1-2.module+el8.1.0+4044+36416a77. Fixed in 0:1.0.1-2.module+el8.1.0+4044+36416a77. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Squid is a widely used caching proxy for the web, supporting HTTP, HTTPS, and FTP protocols. It is designed to improve web performance by caching frequently requested content, thus reducing bandwidth usage and improving response times. The libecap library provides a framework for extending Squid's capabilities through plugins. However, recent vulnerabilities have been identified in these packages, necessitating immediate attention to maintain system security.
Vulnerability Detail
The vulnerabilities identified as CVE-2026-32748 and CVE-2026-33526 expose systems using Squid and libecap to potential exploitation. These vulnerabilities could allow an attacker to execute arbitrary code, leading to unauthorized access or denial of service. The issues stem from improper handling of certain requests, which can be exploited by crafting malicious input. The CVSS score for this vulnerability is 7.5, indicating a high severity level that requires prompt remediation.
How To Fix
Minimum fixed version
0:1.0.1-2.module+el8.1.0+4044+36416a77
This is the first release that contains the fix.
sudo dnf update libecapTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not possible, consider implementing network-level protections such as firewalls to restrict access to the affected services. Additionally, monitor logs for unusual activity that may indicate exploitation attempts.
Conclusion
The vulnerabilities in Squid and libecap pose significant risks to system security, with potential for arbitrary code execution. Immediate action is required to update these packages to their patched versions to mitigate these risks. Utilizing tools like Vulert can further enhance your security posture by providing real-time vulnerability monitoring.
See every vulnerability recorded for libecap →
FAQ
These are identifiers for specific vulnerabilities found in the Squid and libecap packages that could allow attackers to execute arbitrary code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
The CVSS score for this vulnerability is 7.5, indicating a high severity level.
Implement network-level protections and monitor logs for unusual activity until you can apply the updates.
Vulert monitors and alerts for open-source vulnerabilities using a manifest file like package-lock.json, providing real-time insights into your software's security.
Related vulnerabilities
Recent vulnerabilities recorded for libecap.
