← Back to browse · API

CVE-2025-54574

Severity
CRITICAL
CVSS
9.3
EPSS
0.22918
Risk score
45.22
CISA KEV
No
PoC
No
Published
2025-08-01
Modified
2025-11-05
First seen
2026-08-07
Aliases
EUVD-2025-23392
Products
squid-cache:squid < 6.4
Sources
euvd EUVD-2025-23392

Description

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

References