Squidbleed Vulnerability - NULL Terminator in Whitespace Set

Ankit Mehta@Secvyn

•updated Jun 24, 2026•0•0•1

Detects the execution of 'squid.exe' with command-line arguments that contain whitespace characters potentially indicative of a NULL terminator vulnerability (Squidbleed). The rule specifically looks for common whitespace representations like 'w_space', 'space', 'tab', 'newline', '\n', '\r', and '\t' in the command line.