CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files

Gbhackers •Divya • August 11, 2026

Cisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files. These vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5. ClamAV Vulnerabilities The issues are detailed in the Cisco […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco ClamAV Vulnerabilities Allow Remote DoS Attacks Cisco disclosed multiple high-severity vulnerabilities in ClamAV, tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348. These flaws allow unauthenticated remote attackers to crash the antivirus scanning process via specially crafted ZIP and PDF files. The vulnerabilities were found in the ZIP archive parser and are particularly impactful on Windows systems. Proof-of-concept exploit code is publicly available, increasing the risk of imminent attacks. Cisco has released patches for the vulnerabilities, but a patched version of the Secure Endpoint Connector is still pending. Administrators are advised to apply the available security updates promptly to mitigate risks. 13 sources 71

Extracted Entities

CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files

The full story

Extracted Entities

Companies (1)

CVEs (7)

Platforms (1)