Back Feeds.4Sysops

Cisco patches decades

Feeds.4Sysops •IT News • July 6, 2026

Cisco's Talos group has released critical security updates for ClamAV, a widely used open-source antivirus engine integrated into mail gateways and endpoint security tools. The patches address seven distinct vulnerabilities found in versions 1.5.3 and 1.4.5 of the software. Several of these flaws have existed within the codebase for nearly two decades, highlighting long-standing risks in legacy parsing logic. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco Patches Long-Standing Vulnerabilities in ClamAV Antivirus Engine Cisco's Talos group released security patches for ClamAV, an open-source antivirus engine, addressing seven vulnerabilities in versions 1.5.3 and 1.4.5. These flaws, some dating back nearly two decades, primarily affect the code responsible for unpacking and parsing executable formats. Organizations using ClamAV in mail gateways, file upload checks, and endpoint security tools are impacted. The vulnerabilities highlight risks associated with legacy parsing logic. The patches include fixes for critical issues that could potentially be exploited if left unaddressed. Security professionals are advised to update their systems promptly to mitigate risks. The vulnerabilities were confirmed by Cisco's Talos team and are now patched. 2 sources 58

Extracted Entities

Platforms (1)

ClamAV