NewsSchneier on Security
Friday Squid Blogging: “Squidbleed” Vulnerability
Teaser from the source
In a rare combined cybersecurity/squid post, a twenty-nine-year-old squid proxy bug can leak HTTP requests. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Schneier on SecurityMore on Blogging
Other advisories
- Not ratedosv:CVE-2026-125753ABP Framework before 10.6.2 and 10.7.0 Path Traversal via Blogging File Endpoints
- MediumCVE-2026-120035The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scri…
- MediumCVE-2026-111070The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and includi…
- MediumCVE-2026-110707The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scri…
- HighCVE-2026-109207Das RSS-Aggregator-Plugin von Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator für WordPress ist anfällig für Cros...
- HighCVE-2026-109207The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scri…
- MediumCVE-2026-104735Das RSS-Aggregator-Plugin von Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator für WordPress ist anfällig für eine...
- MediumCVE-2026-104735The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scri…
Source: https://www.schneier.com/blog/archives/2026/07/friday-squid-blogging-squidbleed-vulnerability.html
ID