CVE-2026-47729
Catchy branding masks narrow attack vector; real vuln but hype-inflated severity claims.
What: Out-of-bounds read in Squid Proxy when accessing misbehaving FTP servers (CVE-2026-47729), dubbed "Squidbleed" by researchers; claimed to affect all versions since 1997 in default config.
Why it matters: Social chatter invokes Heartbleed analogy and claims memory leakage, but official OSS Security post clarifies the actual flaw is a narrow OOB read tied to FTP server interaction, not pervasive default-config exposure. No KEV listing, no CVSS assigned, no confirmed PoC or in-the-wild exploitation yet. Squid maintainers have patched (v7.6); vendors' urgency unclear.
Where it's seen: Security researchers and aggregators amplifying "Squidbleed" branding; French and English-language infosec blogs repeating the Heartbleed comparison; increased actor chatter noted by VulDB but unverified. Heavy marketing-style framing vs. technical detail.
RISK: MODERATE — Squid is widely deployed; OOB read in FTP path merits patching but impact scope unclear.
No NVD details ingested for this CVE yet.