VulnerabilitySANS NewsBites
Squid Memory Leak Discovered by Mythos Preview After 29 Years
NEOSEC enrichment — no mirror of the original source
Calif researcher Lam Jun Rong has published a blog describing a flaw in Squid, a popular open-source web proxy, that was discovered with the help of Mythos Preview in 2026, but which had been in the code since 1997. The flaw (CVE-2026-47729
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Frost, Neely.
Linked advisories
Affected vendors and products
More on Discovered
Other advisories
- Not ratedosv:CLEANSTART-2026-VJ71474issue was discovered in GNOME GLib before 2
- Not ratedosv:CLEANSTART-2026-YJ32154security flaw has been discovered in mwiede jsch up to 2
- CriticalCVE-2026-111472An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data fro…
- Not ratedosv:CLEANSTART-2026-EW60545heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext
- Not ratedosv:CLEANSTART-2026-JS33298flaw was discovered in FasterXML jackson-databind in all versions before 2
- Not ratedosv:CLEANSTART-2026-NN88858Polymorphic Typing issue was discovered in FasterXML jackson-databind 2
- Not ratedosv:CLEANSTART-2026-TI02009deserialization flaw was discovered in jackson-databind through 2
- Not ratedosv:CLEANSTART-2026-JP41906flaw was discovered in jackson-databind in versions before 2
Other news entries
- Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute IntrusionsNewsThe Hacker News
- The ‘Mythos moment’ has already passed. Now comes the hard part for cybersecurityNewsCSO Online
- PHP2Shell exposes the weakness in coordinated vulnerability disclosureNewsCSO Online
- Two critical PHP flaws put the web on alert as emergency patches arriveNewsCSO Online
- MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native AddonNewsThe Hacker News
- Hallucinated domain in official OpenAI skill underscores AI supply chain risksNewsCSO Online
- Ivanti ICS Zero-Day Attacks Highlight Vendor Patching HurdlesNewsDark Reading
- Hackers abuse the Ivanti Connect Secure bug to gain access without accountsNewsCSO Online
ID