VulnerabilityBleeping Computer
7.5 — HIGH
Cisco warns of high-severity ClamAV flaws with public exploits
Cisco warned of two high-severity vulnerabilities affecting the Secure Endpoint Connector that allow threat actors to crash the ClamAV scanning process in denial-of-service (DoS) attacks. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Two high-severity vulnerabilities in ClamAV's ZIP archive parser allow unauthenticated, remote attackers to crash the scanning process in denial-of-service (DoS) attacks, primarily affecting Windows platforms.
⚙️Technical Details
Affected Systems
Secure Endpoint Connector for WindowsLinuxMac
Attack Vectors
NETWORK
💥Impact Assessment
Severity: HIGH
Who Is at Risk
Users of affected systems, particularly those running Windows platforms with ClamAV 1.5.0 through 1.5.3
🛡️Recommended Actions
1Apply patches for CVE-2026-20337 and CVE-2026-20338 in affected versions of Secure Endpoint Connector
2Disable ZIP file scanning or use alternative scanning mechanisms until patches are available
3Monitor system logs for suspicious activity related to ClamAV
📦Affected Products
Secure Endpoint ConnectorClamAV
🔐NVD Verified DataVERIFIED
CVE-2026-20337 ↗CVSS 7.5 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWeaknesses
CWE-120
CVE-2026-20338 ↗CVSS 7.5 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWeaknesses
CWE-415
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.