Cisco warns of high-severity ClamAV flaws with public exploits
Read original article ↗AI Summary
Cisco has warned of two high-severity vulnerabilities in ClamAV, tracked as CVE-2026-20337 and CVE-2026-20338, affecting versions 1.5.0 through 1.5.3. These flaws reside in the ZIP archive parser and stem from improper boundary checks and memory handling, allowing unauthenticated remote attackers to cause a denial-of-service (DoS) condition by submitting a specially crafted ZIP file that crashes the ClamAV scanning process. Proof-of-concept exploit code is publicly available, though there is no evidence of active exploitation in the wild. The vulnerabilities have a high security impact on Windows platforms due to the privileged context in which ClamAV runs, and they were patched in ClamAV version 1.5.4 released on August 7, 2026.
AI-extracted · verify before operational use
No entities or IoCs were extracted from this article.