CVE-2026-47729

Squid: Memory disclosure in FTP gateway

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.

We have discovered 8,568 live websites that are affected by CVE-2026-47729.

Run a Free Instant Scan



Affected Software

Product  Squid
Category Cache Tools
Vulnerable Domains8,568 live websites (100% of Squid install base)
Vulnerable Versions
  • from 0 through 7.6
Vulnerable Versions Count54 versions ( 98% of all versions)


Common Weakness Enumeration

CWE-125 Out-of-bounds Read



Details

  • Published - Jul 16, 2026
  • Updated - Jul 17, 2026

Website Distribution by Country

Number of websites using CVE-2026-47729
United States900 websites


Germany3,768 websites
Japan909 websites
GB380 websites
Poland279 websites
France273 websites
Spain207 websites
China166 websites
Romania159 websites
Italy145 websites

Website Distribution by TLD

Number of websites using CVE-2026-47729
.de2,367 websites
.com2,263 websites
.net358 websites
.co.uk316 websites
.fr262 websites
.org223 websites
.es179 websites
.pl174 websites
.jp168 websites
.at128 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-47729

Top websites that are affected by CVE-2026-47729. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.*********.net GB*,***
***.org United States*,***
*********.net GB*,***
*********.**.uk GB**,***
********.**.uk United States**,***
********.***********.com Germany**,***
*****.org France**,***
****.*********.net GB**,***
*******.**.jp United States**,***
*********.**.gov United States**,***
See full domain list

FAQ

CVE-2026-47729 is Out-of-bounds Read in Squid
A total of 8,568 websites have been identified as vulnerable to CVE-2026-47729, based on global website indexing conducted by WebTechSurvey.
The Squid is affected by the CVE-2026-47729 vulnerability.
Squid versions up to 7.6 are vulnerable to CVE-2026-47729.
CVE-2026-47729 is resolved in version 7.6 of Squid.