Cisco Secure Endpoint ClamAV Vulnerabilities Advisory

Vulnerability Overview Vulnerability Name: ClamAV Vulnerabilities Affecting Cisco Products Publication Date: August 7, 2026 CVSS Score: 7.5 Vulnerability Type: Multiple vulnerabilities in ClamAV can lead to denial of service (DoS) conditions, disrupting scanning operations. Scope of Impact Affected Products: - Cisco Secure Endpoint Connector for Linux - Cisco Secure Endpoint Connector for Mac - Cisco Secure Endpoint Connector for Windows - Cisco Secure Endpoint Private Cloud Vulnerability Details: - CVE-2026-20337: Out-of-bounds write vulnerability in ClamAV Zip file handling - CVE-2026-20338: Memory corruption vulnerability in ClamAV Zip file handling - CVE-2026-20339: Integer overflow vulnerability in ClamAV PESpin file handling - CVE-2026-20345: Memory corruption vulnerability in ClamAV GPT file handling - CVE-2026-20346: Memory corruption vulnerability in ClamAV PDF file handling - CVE-2026-20347: Memory corruption vulnerability in ClamAV Mach-O file handling - CVE-2026-20348: Memory corruption vulnerability in ClamAV XAR file handling Remediation Fixed Software: - Cisco Secure Endpoint Connector for Linux: Version 4.2.8 and later - Cisco Secure Endpoint Connector for Mac: Version 4.2.8 and later - Cisco Secure Endpoint Connector for Windows: Version 4.2.8 and later - Cisco Secure Endpoint Private Cloud: Version 4.2.8 and later Update Instructions: - Update the Cisco Secure Endpoint Connector client to obtain the latest security patches. - For Cisco Secure Endpoint Private Cloud, ensure that version 4.2.8 or later is used. Additional Information Proof of Concept: No specific POC code or exploit code is provided in this document. Source: The vulnerabilities were reported by multiple security researchers, including Atun, Dagobu Rakesh, Feng Xue, Kevin Stubbing, Iedukhlong, Tristan Madani, and Yazdan Soltani. Summary This security advisory details multiple vulnerabilities present in ClamAV that could lead to denial of service conditions. Affected Cisco products include the Linux, Mac, and Windows versions of the Secure Endpoint Connector, as well as Secure Endpoint Private Cloud. Users are advised to update to the specified versions as soon as possible to remediate these vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco Secure Endpoint ClamAV Vulnerabilities Advisory