Search

Find a vulnerability

Search criteria

    19464 vulnerabilities by Cisco

    CERTFR-2026-AVI-0825

    Vulnerability from certfr_avis - Published: 2026-07-02 - Updated: 2026-07-02

    De multiples vulnérabilités ont été découvertes dans les produits Cisco. Elles permettent à un attaquant de provoquer un déni de service à distance et une atteinte à la confidentialité des données.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Cisco Secure Endpoint Secure Endpoint Private Cloud versions antérieures à 4.2.8
    Cisco Secure Endpoint Secure Endpoint Connector versions antérieures à 1.27.21 pour Mac
    Cisco Secure Endpoint Secure Endpoint Connector versions antérieures à 1.29.01 pour Linux
    Cisco N/A Catalyst Center versions 2.3.7 antérieures à 2.3.7.11-VA GSMU100
    Cisco Secure Endpoint Secure Endpoint Connector versions antérieures à 8.6.21 pour Windows
    Cisco N/A Catalyst Center versions 3.1 antérieures à 3.1.6 GSMU200
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Secure Endpoint Private Cloud versions ant\u00e9rieures \u00e0 4.2.8",
      "product": {
        "name": "Secure Endpoint",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Secure Endpoint Connector versions ant\u00e9rieures \u00e0 1.27.21 pour Mac",
      "product": {
        "name": "Secure Endpoint",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Secure Endpoint Connector versions ant\u00e9rieures \u00e0 1.29.01 pour Linux",
      "product": {
        "name": "Secure Endpoint",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst Center versions 2.3.7 ant\u00e9rieures \u00e0 2.3.7.11-VA GSMU100",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Secure Endpoint Connector versions ant\u00e9rieures \u00e0 8.6.21 pour Windows",
      "product": {
        "name": "Secure Endpoint",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst Center versions 3.1 ant\u00e9rieures \u00e0 3.1.6 GSMU200",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-20216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20216"
    },
    {
      "name": "CVE-2026-20243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20243"
    },
    {
      "name": "CVE-2026-20215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20215"
    },
    {
      "name": "CVE-2026-20213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20213"
    },
    {
      "name": "CVE-2026-20214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20214"
    },
    {
      "name": "CVE-2026-20217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20217"
    },
    {
      "name": "CVE-2026-20244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20244"
    },
    {
      "name": "CVE-2026-20191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20191"
    }
  ],
  "initial_release_date": "2026-07-02T00:00:00",
  "last_revision_date": "2026-07-02T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0825",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
  "vendor_advisories": [
    {
      "published_at": "2026-07-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-clamav-88cFYyxR",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
    },
    {
      "published_at": "2026-07-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-catc-file-read-wLH2vf8X",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X"
    }
  ]
}

    CERTFR-2026-AVI-0756

    Vulnerability from certfr_avis - Published: 2026-06-16 - Updated: 2026-06-16

    Une vulnérabilité a été découverte dans Cisco Catalyst. Elle permet à un attaquant de provoquer une atteinte à l'intégrité des données.

    Cisco indique que la vulnérabilité CVE-2026-20262 est activement exploitée.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Cisco Catalyst SD-WAN Catalyst SD-WAN versions 20.18.3 antérieures à 20.18.3.1
    Cisco Catalyst SD-WAN Catalyst SD-WAN versions antérieures à 20.9.9.2
    Cisco Catalyst SD-WAN Catalyst SD-WAN versions 20.15.5 antérieures à 20.15.5.3
    Cisco Catalyst SD-WAN Catalyst SD-WAN versions 20.15.4 antérieures à 20.15.4.5
    Cisco Catalyst SD-WAN Catalyst SD-WAN versions 20.12.7. antérieures à 20.12.7.2
    Cisco Catalyst SD-WAN Catalyst SD-WAN versions 26.1.1 antérieures à 26.1.1.2
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Catalyst SD-WAN versions 20.18.3 ant\u00e9rieures \u00e0 20.18.3.1",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN versions ant\u00e9rieures \u00e0 20.9.9.2",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN versions 20.15.5 ant\u00e9rieures \u00e0 20.15.5.3",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN versions 20.15.4 ant\u00e9rieures \u00e0 20.15.4.5",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN versions 20.12.7. ant\u00e9rieures \u00e0 20.12.7.2",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN versions 26.1.1 ant\u00e9rieures \u00e0 26.1.1.2",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-20262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20262"
    }
  ],
  "initial_release_date": "2026-06-16T00:00:00",
  "last_revision_date": "2026-06-16T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0756",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-06-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Cisco Catalyst. Elle permet \u00e0 un attaquant de provoquer une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n\nCisco indique que la vuln\u00e9rabilit\u00e9 CVE-2026-20262 est activement exploit\u00e9e.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Cisco Catalyst",
  "vendor_advisories": [
    {
      "published_at": "2026-06-15",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sdwan-arbfw-c2rZvQ",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ"
    }
  ]
}

    CVE-2026-20244 (GCVE-0-2026-20244)

    Vulnerability from nvd – Published: 2026-07-01 16:28 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV DMG File Processing Denial of Service Vulnerability
    Summary
    A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in DMG files during scanning, which may result in an integer overflow on 32-bit platforms only. An attacker could exploit this vulnerability by submitting a crafted file that contains DMG content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20244",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:17:32.499689Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:08.394Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in DMG files during scanning, which may result in an integer overflow on 32-bit platforms only. An attacker could exploit this vulnerability by submitting a crafted file that contains DMG content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:28:27.613Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwu22472"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV DMG File Processing Denial of Service Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20244",
    "datePublished": "2026-07-01T16:28:27.613Z",
    "dateReserved": "2025-10-08T11:59:15.400Z",
    "dateUpdated": "2026-07-01T17:25:08.394Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20243 (GCVE-0-2026-20243)

    Vulnerability from nvd – Published: 2026-07-01 16:30 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV ALZ Archive Processing Denial of Service Vulnerability
    Summary
    A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in ALZ files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains ALZ content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20243",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:19:13.065202Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:08.088Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in ALZ files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains ALZ content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:30:20.848Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwu18798"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV ALZ Archive Processing Denial of Service Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20243",
    "datePublished": "2026-07-01T16:30:20.848Z",
    "dateReserved": "2025-10-08T11:59:15.400Z",
    "dateUpdated": "2026-07-01T17:25:08.088Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20217 (GCVE-0-2026-20217)

    Vulnerability from nvd – Published: 2026-07-01 16:28 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability
    Summary
    A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20217",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:17:51.378262Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:08.697Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:28:03.720Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwt57454"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20217",
    "datePublished": "2026-07-01T16:28:03.720Z",
    "dateReserved": "2025-10-08T11:59:15.398Z",
    "dateUpdated": "2026-07-01T17:25:08.697Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20216 (GCVE-0-2026-20216)

    Vulnerability from nvd – Published: 2026-07-01 16:27 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability
    Summary
    A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-770 - Allocation of Resources Without Limits or Throttling
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20216",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:18:03.116587Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:08.850Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:27:51.314Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwt44538"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20216",
    "datePublished": "2026-07-01T16:27:51.314Z",
    "dateReserved": "2025-10-08T11:59:15.398Z",
    "dateUpdated": "2026-07-01T17:25:08.850Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20215 (GCVE-0-2026-20215)

    Vulnerability from nvd – Published: 2026-07-01 16:28 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability
    Summary
    A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in 7z files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains 7z content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20215",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:17:41.483279Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:08.547Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in 7z files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains 7z\u0026nbsp;content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:28:09.844Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwt62781"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20215",
    "datePublished": "2026-07-01T16:28:09.844Z",
    "dateReserved": "2025-10-08T11:59:15.398Z",
    "dateUpdated": "2026-07-01T17:25:08.547Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20214 (GCVE-0-2026-20214)

    Vulnerability from nvd – Published: 2026-07-01 16:27 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability
    Summary
    A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains portable executable content compressed with FSG to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20214",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:18:19.481926Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:09.148Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains portable executable content compressed with FSG to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:27:33.622Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwt62779"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20214",
    "datePublished": "2026-07-01T16:27:33.622Z",
    "dateReserved": "2025-10-08T11:59:15.398Z",
    "dateUpdated": "2026-07-01T17:25:09.148Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20213 (GCVE-0-2026-20213)

    Vulnerability from nvd – Published: 2026-07-01 16:27 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability
    Summary
    A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20213",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:18:10.967118Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:08.998Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:27:38.657Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwt62774"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20213",
    "datePublished": "2026-07-01T16:27:38.657Z",
    "dateReserved": "2025-10-08T11:59:15.398Z",
    "dateUpdated": "2026-07-01T17:25:08.998Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20191 (GCVE-0-2026-20191)

    Vulnerability from nvd – Published: 2026-07-01 16:27 – Updated: 2026-07-01 17:25
    VLAI
    Title
    Cisco Catalyst Center Arbitrary File Read Vulnerability
    Summary
    A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.  This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Catalyst Center Affected: 2.3.7.0-VA
    Affected: 2.3.7.5-VA
    Affected: 2.3.7.6-VA
    Affected: 2.3.7.7-VA
    Affected: 2.3.7.9-VA
    Affected: 3.1.3
    Affected: 3.1.3-VA
    Affected: 2.3.7.10-VA
    Affected: 3.1.5
    Affected: 3.1.5-VA
    Affected: 3.1.5-VA on AWS
    Affected: 3.1.5-RevUp
    Affected: 3.1.6
    Affected: 3.1.6-VA
    Affected: 3.1.6-BETA
    Affected: 3.1.6-GSMU100
    Affected: 3.1.6-VA-GSMU100
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20191",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:18:27.744122Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:09.294Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Catalyst Center",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "2.3.7.0-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.5-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.6-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.7-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.9-VA"
            },
            {
              "status": "affected",
              "version": "3.1.3"
            },
            {
              "status": "affected",
              "version": "3.1.3-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.10-VA"
            },
            {
              "status": "affected",
              "version": "3.1.5"
            },
            {
              "status": "affected",
              "version": "3.1.5-VA"
            },
            {
              "status": "affected",
              "version": "3.1.5-VA on AWS"
            },
            {
              "status": "affected",
              "version": "3.1.5-RevUp"
            },
            {
              "status": "affected",
              "version": "3.1.6"
            },
            {
              "status": "affected",
              "version": "3.1.6-VA"
            },
            {
              "status": "affected",
              "version": "3.1.6-BETA"
            },
            {
              "status": "affected",
              "version": "3.1.6-GSMU100"
            },
            {
              "status": "affected",
              "version": "3.1.6-VA-GSMU100"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.\u0026nbsp;\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:27:32.642Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-catc-file-read-wLH2vf8X",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X"
        }
      ],
      "source": {
        "advisory": "cisco-sa-catc-file-read-wLH2vf8X",
        "defects": [
          "CSCwt73509"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Catalyst Center Arbitrary File Read Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20191",
    "datePublished": "2026-07-01T16:27:32.642Z",
    "dateReserved": "2025-10-08T11:59:15.395Z",
    "dateUpdated": "2026-07-01T17:25:09.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20178 (GCVE-0-2026-20178)

    Vulnerability from nvd – Published: 2026-06-17 16:28 – Updated: 2026-06-17 18:13
    VLAI
    Summary
    A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker to redirect users to a malicious webpage. Cisco has addressed this vulnerability in the Cisco Webex App, and no customer action is needed. This vulnerability existed due to improper input validation of URL parameters in an HTTP request. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to click a crafted URL. A successful exploit could have allowed the attacker to redirect a user to a malicious website.
    Severity
    4.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
    Assigner
    References
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20178",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T18:13:20.277003Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T18:13:35.374Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Webex App",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker to redirect users to a malicious webpage. Cisco has addressed this vulnerability in the Cisco Webex App, and no customer action is needed.\r\n\r This vulnerability existed due to improper input validation of URL parameters in an HTTP request. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to click a crafted URL. A successful exploit could have allowed the attacker to redirect a user to a malicious website."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T16:28:34.825Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-webex-app-redirect-KOyxhffH",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-redirect-KOyxhffH"
        }
      ],
      "source": {
        "advisory": "cisco-sa-webex-app-redirect-KOyxhffH",
        "defects": [
          "CSCwt98312"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20178",
    "datePublished": "2026-06-17T16:28:34.825Z",
    "dateReserved": "2025-10-08T11:59:15.392Z",
    "dateUpdated": "2026-06-17T18:13:35.374Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20246 (GCVE-0-2026-20246)

    Vulnerability from nvd – Published: 2026-06-17 16:17 – Updated: 2026-06-17 17:17
    VLAI
    Title
    Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability
    Summary
    A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this vulnerability by using certain commands at the CLI. A successful exploit could allow the attacker to elevate privileges to root.
    Severity
    6 (Medium)
    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Umbrella Insights Virtual Appliance Affected: 2.6.0
    Affected: 2.5.6
    Affected: 2.5
    Affected: 2.4.12
    Affected: 2.7
    Affected: 2.6.2
    Affected: 2.5.5
    Affected: 2.5.4
    Affected: 2.8
    Affected: 2.6.1
    Affected: 2.5.7
    Affected: 1.5.4
    Affected: 1.5.5
    Affected: 1.5.6
    Affected: 2.0.0
    Affected: 2.0.2
    Affected: 2.0.3
    Affected: 2.1.0
    Affected: 2.1.2
    Affected: 2.1.4
    Affected: 2.1.5
    Affected: 2.2
    Affected: 2.2.1
    Affected: 2.3
    Affected: 2.3.1
    Affected: 2.4
    Affected: 2.4.4
    Affected: 2.4.6
    Affected: 2.8.9
    Affected: 3.0
    Affected: 3.1
    Affected: 3.2
    Affected: 2.8.1
    Affected: 2.8.2
    Affected: 2.8.3
    Affected: 2.8.4
    Affected: 2.8.5
    Affected: 3.0.1
    Affected: 3.0.2
    Affected: 3.0.4
    Affected: 3.0.5
    Affected: 3.1.1
    Affected: 3.1.2
    Affected: 3.1.3
    Affected: 3.1.4
    Affected: 3.2.1
    Affected: 3.2.2
    Affected: 3.2.3
    Affected: 3.3
    Affected: 3.3.1
    Affected: 3.3.2
    Affected: 3.3.3
    Affected: 3.3.4
    Affected: 3.4
    Affected: 3.4.1
    Affected: 3.4.2
    Affected: 3.4.3
    Affected: 3.4.4
    Affected: 3.4.5
    Affected: 3.4.6
    Affected: 3.5
    Affected: 2.7.1
    Affected: 2.7.2
    Affected: 2.7.6
    Affected: 2.7.9
    Affected: 2.7.10
    Affected: 3.5.1
    Affected: 3.5.2
    Affected: 3.6.1
    Affected: 3.6.2
    Affected: 3.7
    Affected: 3.7.1
    Affected: 3.8.3
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20246",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T17:15:44.900787Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T17:17:13.797Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Umbrella Insights Virtual Appliance",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.0"
            },
            {
              "status": "affected",
              "version": "2.5.6"
            },
            {
              "status": "affected",
              "version": "2.5"
            },
            {
              "status": "affected",
              "version": "2.4.12"
            },
            {
              "status": "affected",
              "version": "2.7"
            },
            {
              "status": "affected",
              "version": "2.6.2"
            },
            {
              "status": "affected",
              "version": "2.5.5"
            },
            {
              "status": "affected",
              "version": "2.5.4"
            },
            {
              "status": "affected",
              "version": "2.8"
            },
            {
              "status": "affected",
              "version": "2.6.1"
            },
            {
              "status": "affected",
              "version": "2.5.7"
            },
            {
              "status": "affected",
              "version": "1.5.4"
            },
            {
              "status": "affected",
              "version": "1.5.5"
            },
            {
              "status": "affected",
              "version": "1.5.6"
            },
            {
              "status": "affected",
              "version": "2.0.0"
            },
            {
              "status": "affected",
              "version": "2.0.2"
            },
            {
              "status": "affected",
              "version": "2.0.3"
            },
            {
              "status": "affected",
              "version": "2.1.0"
            },
            {
              "status": "affected",
              "version": "2.1.2"
            },
            {
              "status": "affected",
              "version": "2.1.4"
            },
            {
              "status": "affected",
              "version": "2.1.5"
            },
            {
              "status": "affected",
              "version": "2.2"
            },
            {
              "status": "affected",
              "version": "2.2.1"
            },
            {
              "status": "affected",
              "version": "2.3"
            },
            {
              "status": "affected",
              "version": "2.3.1"
            },
            {
              "status": "affected",
              "version": "2.4"
            },
            {
              "status": "affected",
              "version": "2.4.4"
            },
            {
              "status": "affected",
              "version": "2.4.6"
            },
            {
              "status": "affected",
              "version": "2.8.9"
            },
            {
              "status": "affected",
              "version": "3.0"
            },
            {
              "status": "affected",
              "version": "3.1"
            },
            {
              "status": "affected",
              "version": "3.2"
            },
            {
              "status": "affected",
              "version": "2.8.1"
            },
            {
              "status": "affected",
              "version": "2.8.2"
            },
            {
              "status": "affected",
              "version": "2.8.3"
            },
            {
              "status": "affected",
              "version": "2.8.4"
            },
            {
              "status": "affected",
              "version": "2.8.5"
            },
            {
              "status": "affected",
              "version": "3.0.1"
            },
            {
              "status": "affected",
              "version": "3.0.2"
            },
            {
              "status": "affected",
              "version": "3.0.4"
            },
            {
              "status": "affected",
              "version": "3.0.5"
            },
            {
              "status": "affected",
              "version": "3.1.1"
            },
            {
              "status": "affected",
              "version": "3.1.2"
            },
            {
              "status": "affected",
              "version": "3.1.3"
            },
            {
              "status": "affected",
              "version": "3.1.4"
            },
            {
              "status": "affected",
              "version": "3.2.1"
            },
            {
              "status": "affected",
              "version": "3.2.2"
            },
            {
              "status": "affected",
              "version": "3.2.3"
            },
            {
              "status": "affected",
              "version": "3.3"
            },
            {
              "status": "affected",
              "version": "3.3.1"
            },
            {
              "status": "affected",
              "version": "3.3.2"
            },
            {
              "status": "affected",
              "version": "3.3.3"
            },
            {
              "status": "affected",
              "version": "3.3.4"
            },
            {
              "status": "affected",
              "version": "3.4"
            },
            {
              "status": "affected",
              "version": "3.4.1"
            },
            {
              "status": "affected",
              "version": "3.4.2"
            },
            {
              "status": "affected",
              "version": "3.4.3"
            },
            {
              "status": "affected",
              "version": "3.4.4"
            },
            {
              "status": "affected",
              "version": "3.4.5"
            },
            {
              "status": "affected",
              "version": "3.4.6"
            },
            {
              "status": "affected",
              "version": "3.5"
            },
            {
              "status": "affected",
              "version": "2.7.1"
            },
            {
              "status": "affected",
              "version": "2.7.2"
            },
            {
              "status": "affected",
              "version": "2.7.6"
            },
            {
              "status": "affected",
              "version": "2.7.9"
            },
            {
              "status": "affected",
              "version": "2.7.10"
            },
            {
              "status": "affected",
              "version": "3.5.1"
            },
            {
              "status": "affected",
              "version": "3.5.2"
            },
            {
              "status": "affected",
              "version": "3.6.1"
            },
            {
              "status": "affected",
              "version": "3.6.2"
            },
            {
              "status": "affected",
              "version": "3.7"
            },
            {
              "status": "affected",
              "version": "3.7.1"
            },
            {
              "status": "affected",
              "version": "3.8.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this vulnerability by using certain commands at the CLI. A successful exploit could allow the attacker to elevate privileges to root."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "Improper Privilege Management",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T16:17:13.708Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-umbrella-priv-esc-F4wJB7AU",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-priv-esc-F4wJB7AU"
        }
      ],
      "source": {
        "advisory": "cisco-sa-umbrella-priv-esc-F4wJB7AU",
        "defects": [
          "CSCwt75291"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20246",
    "datePublished": "2026-06-17T16:17:13.708Z",
    "dateReserved": "2025-10-08T11:59:15.400Z",
    "dateUpdated": "2026-06-17T17:17:13.797Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20220 (GCVE-0-2026-20220)

    Vulnerability from nvd – Published: 2026-06-17 16:17 – Updated: 2026-06-17 17:16
    VLAI
    Title
    Cisco Crosswork Network Controller Remote Code Execution Vulnerability
    Summary
    A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to insufficient input validation in the configuration template engine of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system in limited areas of the file system. This vulnerability affects only areas of the operating system for which the template user has write permissions.  To exploit this vulnerability, the attacker must have valid template user credentials with write permissions. Template users with read permissions cannot exploit this vulnerability. 
    Severity
    6.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Crosswork Network Change Automation Affected: 3.0.0
    Affected: 3.0.1
    Affected: 1.0.0
    Affected: 2.0.0
    Affected: 2.0.1
    Affected: 3.0.2
    Affected: 2.0.2
    Affected: 3.0.3
    Affected: 4.0.0
    Affected: 4.1.0
    Affected: 4.5.0
    Affected: 4.1.1
    Affected: 5.0.0
    Affected: 4.5.1
    Affected: 4.1.2
    Affected: 5.0.1
    Affected: 4.5.2
    Affected: 5.0.2
    Affected: 4.1.3
    Affected: 6.0.0
    Affected: 7.0.0
    Affected: 4.1.4
    Affected: 6.0.2
    Affected: 5.0.3
    Affected: 6.0.3
    Affected: 5.0.4
    Affected: 7.0.1
    Affected: 6.0.4
    Affected: 7.0.2
    Affected: 7.1.0
    Affected: 5.0.5
    Affected: 7.0.3
    Affected: 7.0.4
    Affected: 7.1.1
    Affected: 7.0.5
    Affected: 7.2.0
    Affected: 7.1.2
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20220",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T17:13:43.754531Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T17:16:59.052Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Crosswork Network Change Automation",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.0.0"
            },
            {
              "status": "affected",
              "version": "3.0.1"
            },
            {
              "status": "affected",
              "version": "1.0.0"
            },
            {
              "status": "affected",
              "version": "2.0.0"
            },
            {
              "status": "affected",
              "version": "2.0.1"
            },
            {
              "status": "affected",
              "version": "3.0.2"
            },
            {
              "status": "affected",
              "version": "2.0.2"
            },
            {
              "status": "affected",
              "version": "3.0.3"
            },
            {
              "status": "affected",
              "version": "4.0.0"
            },
            {
              "status": "affected",
              "version": "4.1.0"
            },
            {
              "status": "affected",
              "version": "4.5.0"
            },
            {
              "status": "affected",
              "version": "4.1.1"
            },
            {
              "status": "affected",
              "version": "5.0.0"
            },
            {
              "status": "affected",
              "version": "4.5.1"
            },
            {
              "status": "affected",
              "version": "4.1.2"
            },
            {
              "status": "affected",
              "version": "5.0.1"
            },
            {
              "status": "affected",
              "version": "4.5.2"
            },
            {
              "status": "affected",
              "version": "5.0.2"
            },
            {
              "status": "affected",
              "version": "4.1.3"
            },
            {
              "status": "affected",
              "version": "6.0.0"
            },
            {
              "status": "affected",
              "version": "7.0.0"
            },
            {
              "status": "affected",
              "version": "4.1.4"
            },
            {
              "status": "affected",
              "version": "6.0.2"
            },
            {
              "status": "affected",
              "version": "5.0.3"
            },
            {
              "status": "affected",
              "version": "6.0.3"
            },
            {
              "status": "affected",
              "version": "5.0.4"
            },
            {
              "status": "affected",
              "version": "7.0.1"
            },
            {
              "status": "affected",
              "version": "6.0.4"
            },
            {
              "status": "affected",
              "version": "7.0.2"
            },
            {
              "status": "affected",
              "version": "7.1.0"
            },
            {
              "status": "affected",
              "version": "5.0.5"
            },
            {
              "status": "affected",
              "version": "7.0.3"
            },
            {
              "status": "affected",
              "version": "7.0.4"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "7.2.0"
            },
            {
              "status": "affected",
              "version": "7.1.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an\u0026nbsp;authenticated, remote attacker to execute arbitrary commands on an affected device.\r\n\r\nThis vulnerability is due to insufficient input validation in the configuration\u0026nbsp;template engine of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system in limited areas of the file system. This vulnerability affects only areas of the operating system for which the template user has write permissions.\u0026nbsp;\r\nTo exploit this vulnerability, the attacker must have valid template user credentials with write permissions. Template users with read permissions cannot exploit this vulnerability.\u0026nbsp;"
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-74",
              "description": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T16:17:06.545Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-cnc-inj-QNMeEmxk",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnc-inj-QNMeEmxk"
        }
      ],
      "source": {
        "advisory": "cisco-sa-cnc-inj-QNMeEmxk",
        "defects": [
          "CSCwt44379"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Crosswork Network Controller Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20220",
    "datePublished": "2026-06-17T16:17:06.545Z",
    "dateReserved": "2025-10-08T11:59:15.398Z",
    "dateUpdated": "2026-06-17T17:16:59.052Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20190 (GCVE-0-2026-20190)

    Vulnerability from nvd – Published: 2026-06-17 16:17 – Updated: 2026-06-17 17:16
    VLAI
    Title
    Cisco Identity Services Engine Information Disclosure Vulnerability
    Summary
    A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Identity Services Engine Software Affected: 3.4.0
    Affected: 3.4 Patch 1
    Affected: 3.4 Patch 2
    Affected: 3.4 Patch 3
    Affected: 3.5.0
    Affected: 3.4 Patch 4
    Affected: 3.5 Patch 1
    Affected: 3.4 Patch 5
    Affected: 3.5 Patch 2
    		Create a notification for this product.
    Cisco Cisco ISE Passive Identity Connector Affected: 3.4.0
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20190",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T17:14:11.061077Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T17:16:45.425Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Identity Services Engine Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.4.0"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.5.0"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 4"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 5"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco ISE Passive Identity Connector",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.4.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device.\r\n\r\nThis vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "Improper Authorization",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T16:17:04.911Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-ise-multi-G5WP8vv",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv"
        }
      ],
      "source": {
        "advisory": "cisco-sa-ise-multi-G5WP8vv",
        "defects": [
          "CSCwt22936"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Cisco Identity Services Engine Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20190",
    "datePublished": "2026-06-17T16:17:04.911Z",
    "dateReserved": "2025-10-08T11:59:15.395Z",
    "dateUpdated": "2026-06-17T17:16:45.425Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20181 (GCVE-0-2026-20181)

    Vulnerability from nvd – Published: 2026-06-17 16:16 – Updated: 2026-06-18 03:56
    VLAI
    Title
    Cisco Identity Services Engine Remote Code Execution Vulnerability
    Summary
    A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. In single-node deployments, successful exploitation of this vulnerability could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.
    Severity
    9.1 (Critical)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Identity Services Engine Software Affected: 3.1.0
    Affected: 3.1.0 p1
    Affected: 3.1.0 p3
    Affected: 3.1.0 p2
    Affected: 3.2.0
    Affected: 3.1.0 p4
    Affected: 3.1.0 p5
    Affected: 3.2.0 p1
    Affected: 3.1.0 p6
    Affected: 3.2.0 p2
    Affected: 3.1.0 p7
    Affected: 3.3.0
    Affected: 3.2.0 p3
    Affected: 3.2.0 p4
    Affected: 3.1.0 p8
    Affected: 3.2.0 p5
    Affected: 3.2.0 p6
    Affected: 3.1.0 p9
    Affected: 3.3 Patch 2
    Affected: 3.3 Patch 1
    Affected: 3.3 Patch 3
    Affected: 3.4.0
    Affected: 3.2.0 p7
    Affected: 3.3 Patch 4
    Affected: 3.4 Patch 1
    Affected: 3.1.0 p10
    Affected: 3.3 Patch 5
    Affected: 3.3 Patch 6
    Affected: 3.4 Patch 2
    Affected: 3.3 Patch 7
    Affected: 3.4 Patch 3
    Affected: 3.5.0
    Affected: 3.4 Patch 4
    Affected: 3.3 Patch 8
    Affected: 3.2 Patch 8
    Affected: 3.5 Patch 1
    Affected: 3.3 Patch 9
    Affected: 3.2 Patch 9
    Affected: 3.4 Patch 5
    Affected: 3.5 Patch 3
    Affected: 3.5 Patch 2
    Affected: 3.3 Patch 10
    Affected: 3.2 Patch 10
    Affected: 3.1.0 p11
    		Create a notification for this product.
    Cisco Cisco ISE Passive Identity Connector Affected: 3.2.0
    Affected: 3.1.0
    Affected: 3.3.0
    Affected: 3.4.0
    Affected: 3.5.0
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20181",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-18T03:56:44.983Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Identity Services Engine Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.0"
            },
            {
              "status": "affected",
              "version": "3.1.0 p1"
            },
            {
              "status": "affected",
              "version": "3.1.0 p3"
            },
            {
              "status": "affected",
              "version": "3.1.0 p2"
            },
            {
              "status": "affected",
              "version": "3.2.0"
            },
            {
              "status": "affected",
              "version": "3.1.0 p4"
            },
            {
              "status": "affected",
              "version": "3.1.0 p5"
            },
            {
              "status": "affected",
              "version": "3.2.0 p1"
            },
            {
              "status": "affected",
              "version": "3.1.0 p6"
            },
            {
              "status": "affected",
              "version": "3.2.0 p2"
            },
            {
              "status": "affected",
              "version": "3.1.0 p7"
            },
            {
              "status": "affected",
              "version": "3.3.0"
            },
            {
              "status": "affected",
              "version": "3.2.0 p3"
            },
            {
              "status": "affected",
              "version": "3.2.0 p4"
            },
            {
              "status": "affected",
              "version": "3.1.0 p8"
            },
            {
              "status": "affected",
              "version": "3.2.0 p5"
            },
            {
              "status": "affected",
              "version": "3.2.0 p6"
            },
            {
              "status": "affected",
              "version": "3.1.0 p9"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.4.0"
            },
            {
              "status": "affected",
              "version": "3.2.0 p7"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 4"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.1.0 p10"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 5"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 6"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 7"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.5.0"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 4"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 8"
            },
            {
              "status": "affected",
              "version": "3.2 Patch 8"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 9"
            },
            {
              "status": "affected",
              "version": "3.2 Patch 9"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 5"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 10"
            },
            {
              "status": "affected",
              "version": "3.2 Patch 10"
            },
            {
              "status": "affected",
              "version": "3.1.0 p11"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco ISE Passive Identity Connector",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.2.0"
            },
            {
              "status": "affected",
              "version": "3.1.0"
            },
            {
              "status": "affected",
              "version": "3.3.0"
            },
            {
              "status": "affected",
              "version": "3.4.0"
            },
            {
              "status": "affected",
              "version": "3.5.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. In single-node deployments, successful exploitation of this vulnerability could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T16:16:56.706Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-ise-multi-G5WP8vv",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv"
        }
      ],
      "source": {
        "advisory": "cisco-sa-ise-multi-G5WP8vv",
        "defects": [
          "CSCwt22913"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Cisco Identity Services Engine Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20181",
    "datePublished": "2026-06-17T16:16:56.706Z",
    "dateReserved": "2025-10-08T11:59:15.393Z",
    "dateUpdated": "2026-06-18T03:56:44.983Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20262 (GCVE-0-2026-20262)

    Vulnerability from nvd – Published: 2026-06-15 16:21 – Updated: 2026-06-17 03:55
    VLAI CISA KEVIntel
    Title
    Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
    Summary
    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This vulnerability exists because the affected software does not properly validate user-supplied input during a file upload process. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected API endpoint of the affected system. A successful exploit could allow the attacker to create or overwrite any file on the underlying operating system. This file could later be used to elevate to root. To exploit this vulnerability, the attacker must have valid credentials with at least a lower-privileged, single-task user account.
    Severity
    6.5 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
    SSVC
    Exploitation: active Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Catalyst SD-WAN Manager Affected: 20.1.12
    Affected: 19.2.1
    Affected: 18.4.4
    Affected: 18.4.5
    Affected: 20.1.1.1
    Affected: 20.1.1
    Affected: 19.3.0
    Affected: 19.2.2
    Affected: 19.2.099
    Affected: 18.3.6
    Affected: 18.3.7
    Affected: 19.2.0
    Affected: 18.3.8
    Affected: 19.0.0
    Affected: 19.1.0
    Affected: 18.4.302
    Affected: 18.4.303
    Affected: 19.2.097
    Affected: 19.2.098
    Affected: 17.2.10
    Affected: 18.3.6.1
    Affected: 19.0.1a
    Affected: 18.2.0
    Affected: 18.4.3
    Affected: 18.4.1
    Affected: 17.2.8
    Affected: 18.3.3.1
    Affected: 18.4.0
    Affected: 18.3.1
    Affected: 17.2.6
    Affected: 17.2.9
    Affected: 18.3.4
    Affected: 17.2.5
    Affected: 18.3.1.1
    Affected: 18.3.5
    Affected: 18.4.0.1
    Affected: 18.3.3
    Affected: 17.2.7
    Affected: 17.2.4
    Affected: 18.3.0
    Affected: 19.2.3
    Affected: 18.4.501_ES
    Affected: 20.3.1
    Affected: 20.1.2
    Affected: 19.2.929
    Affected: 19.2.31
    Affected: 20.3.2
    Affected: 19.2.32
    Affected: 20.3.2_925
    Affected: 20.3.2.1
    Affected: 20.3.2.1_927
    Affected: 18.4.6
    Affected: 20.1.2_937
    Affected: 20.4.1
    Affected: 20.3.2_928
    Affected: 20.3.2_929
    Affected: 20.4.1.0.1
    Affected: 20.3.2.1_930
    Affected: 19.2.4
    Affected: 20.5.0.1.1
    Affected: 20.4.1.1
    Affected: 20.3.3
    Affected: 19.2.4.0.1
    Affected: 20.3.2_937
    Affected: 20.3.3.1
    Affected: 20.5.1
    Affected: 20.1.3
    Affected: 20.3.3.0.4
    Affected: 20.3.3.1.2
    Affected: 20.3.3.1.1
    Affected: 20.4.1.2
    Affected: 20.3.3.0.2
    Affected: 20.4.1.1.5
    Affected: 20.4.1.0.01
    Affected: 20.4.1.0.02
    Affected: 20.3.3.1.7
    Affected: 20.3.3.1.5
    Affected: 20.5.1.0.1
    Affected: 20.3.3.1.10
    Affected: 20.3.3.0.8
    Affected: 20.4.2
    Affected: 20.4.2.0.1
    Affected: 20.3.4
    Affected: 20.3.3.0.14
    Affected: 19.2.4.0.8
    Affected: 19.2.4.0.9
    Affected: 20.3.4.0.1
    Affected: 20.3.2.0.5
    Affected: 20.6.1
    Affected: 20.5.1.0.2
    Affected: 20.3.3.0.17
    Affected: 20.6.1.1
    Affected: 20.6.0.18.3
    Affected: 20.3.2.0.6
    Affected: 20.6.0.18.4
    Affected: 20.4.2.0.2
    Affected: 20.3.3.0.16
    Affected: 20.3.4.0.5
    Affected: 20.6.1.0.1
    Affected: 20.3.4.0.6
    Affected: 20.6.2
    Affected: 20.7.1EFT2
    Affected: 20.3.4.0.9
    Affected: 20.3.4.0.11
    Affected: 20.4.2.0.4
    Affected: 20.3.3.0.18
    Affected: 20.7.1
    Affected: 20.6.2.1
    Affected: 20.3.4.1
    Affected: 20.5.1.1
    Affected: 20.4.2.1
    Affected: 20.4.2.1.1
    Affected: 20.3.4.1.1
    Affected: 20.3.813
    Affected: 20.3.4.0.19
    Affected: 20.4.2.2.1
    Affected: 20.5.1.2
    Affected: 20.3.4.2
    Affected: 20.3.814
    Affected: 20.4.2.2
    Affected: 20.6.2.2
    Affected: 20.3.4.2.1
    Affected: 20.7.1.1
    Affected: 20.3.4.1.2
    Affected: 20.6.2.2.2
    Affected: 20.3.4.0.20
    Affected: 20.6.2.2.3
    Affected: 20.4.2.2.2
    Affected: 20.3.5
    Affected: 20.6.2.0.4
    Affected: 20.4.2.2.3
    Affected: 20.3.4.0.24
    Affected: 20.6.2.2.7
    Affected: 20.6.3
    Affected: 20.3.4.2.2
    Affected: 20.4.2.2.4
    Affected: 20.7.1.0.2
    Affected: 20.8.1
    Affected: 20.3.5.0.8
    Affected: 20.3.5.0.9
    Affected: 20.4.2.2.8
    Affected: 20.3.5.0.7
    Affected: 20.6.3.0.7
    Affected: 20.6.3.0.5
    Affected: 20.6.3.0.10
    Affected: 20.6.3.0.2
    Affected: 20.7.2
    Affected: 20.9.1EFT2
    Affected: 20.6.3.0.11
    Affected: 20.6.3.1
    Affected: 20.6.3.0.14
    Affected: 20.6.4
    Affected: 20.9.1
    Affected: 20.6.3.0.19
    Affected: 20.6.3.0.18
    Affected: 20.3.6
    Affected: 20.9.1.1
    Affected: 20.6.3.0.23
    Affected: 20.6.4.0.4
    Affected: 20.6.3.0.25
    Affected: 20.6.5
    Affected: 20.6.3.0.27
    Affected: 20.9.2
    Affected: 20.9.2.1
    Affected: 20.6.3.0.29
    Affected: 20.6.3.0.31
    Affected: 20.6.3.0.32
    Affected: 20.10.1
    Affected: 20.6.3.0.33
    Affected: 20.9.2.0.01
    Affected: 20.9.1_LI_Images
    Affected: 20.10.1_LI_Images
    Affected: 20.9.2_LI_Images
    Affected: 20.3.7
    Affected: 20.9.3
    Affected: 20.6.5.1
    Affected: 20.11.1
    Affected: 20.11.1_LI_Images
    Affected: 20.9.3_LI_ Images
    Affected: 20.6.3.1.1
    Affected: 20.9.3.0.2
    Affected: 20.6.5.1.2
    Affected: 20.9.3.0.3
    Affected: 20.4.2.3
    Affected: 20.6.3.2
    Affected: 20.6.4.1
    Affected: 20.6.3.0.38
    Affected: 20.6.3.0.39
    Affected: 20.3.5.1
    Affected: 20.3.4.3
    Affected: 20.9.3.1
    Affected: 20.3.3.2
    Affected: 20.6.5.2
    Affected: 20.3.7.1
    Affected: 20.10.1.1
    Affected: 20.6.5.2.1
    Affected: 20.3.4.0.25
    Affected: 20.6.2.2.4
    Affected: 20.6.1.2
    Affected: 20.11.1.1
    Affected: 20.9.3.0.5
    Affected: 20.3.4.0.26
    Affected: 20.6.5.1.3
    Affected: 20.6.3.0.40
    Affected: 20.1.3.1
    Affected: 20.9.2.2
    Affected: 20.6.5.2.3
    Affected: 20.6.5.1.4
    Affected: 20.6.5.3
    Affected: 20.6.3.0.41
    Affected: 20.9.3.0.7
    Affected: 20.6.5.1.5
    Affected: 20.9.3.0.4
    Affected: 20.6.4.0.19
    Affected: 20.6.5.1.6
    Affected: 20.9.3.0.8
    Affected: 20.6.3.3
    Affected: 20.3.7.2
    Affected: 20.6.5.4
    Affected: 20.6.5.1.7
    Affected: 20.9.3.0.12
    Affected: 20.6.4.2
    Affected: 20.6.5.5
    Affected: 20.9.3.2
    Affected: 20.11.1.2
    Affected: 20.6.3.4
    Affected: 20.10.1.2
    Affected: 20.6.5.1.9
    Affected: 20.9.3.0.16
    Affected: 20.6.3.0.45
    Affected: 20.6.5.1.10
    Affected: 20.9.3.0.17
    Affected: 20.6.5.2.4
    Affected: 20.6.4.0.21
    Affected: 20.9.3.0.18
    Affected: 20.6.3.0.46
    Affected: 20.6.3.0.47
    Affected: 20.9.2.3
    Affected: 20.9.3.2_LI_Images
    Affected: 20.9.3.0.21
    Affected: 20.9.3.0.20
    Affected: 20.9.4_LI_Images
    Affected: 20.9.4
    Affected: 20.6.5.1.11
    Affected: 20.12.1
    Affected: 20.12.1_LI_Images
    Affected: 20.6.5.1.13
    Affected: 20.9.3.0.23
    Affected: 20.6.5.2.8
    Affected: 20.9.4.1
    Affected: 20.9.4.1_LI_Images
    Affected: 20.9.3.0.25
    Affected: 20.9.3.0.24
    Affected: 20.6.5.1.14
    Affected: 20.3.8
    Affected: 20.6.6
    Affected: 20.9.3.0.26
    Affected: 20.6.3.0.51
    Affected: 20.9.3.0.29
    Affected: 20.12.2
    Affected: 20.12.2_LI_Images
    Affected: 20.6.6.0.1
    Affected: 20.13.1_LI_Images
    Affected: 20.9.4.0.4
    Affected: 20.13.1
    Affected: 20.9.4.1.1
    Affected: 20.9.5
    Affected: 20.9.5_LI_Images
    Affected: 20.12.3_LI_Images
    Affected: 20.12.3
    Affected: 20.9.4.1.3
    Affected: 20.6.7
    Affected: 20.9.5.1
    Affected: 20.9.5.1_LI_Images
    Affected: 20.9.4.1.6
    Affected: 20.14.1
    Affected: 20.14.1_LI_Images
    Affected: 20.9.5.2
    Affected: 20.9.5.2.1
    Affected: 20.9.5.2_LI_Images
    Affected: 20.12.3.1
    Affected: 20.12.4
    Affected: 20.15.1_LI_Images
    Affected: 20.15.1
    Affected: 20.9.5.1.4
    Affected: 20.9.5.2.7
    Affected: 20.9.5.2.13
    Affected: 20.9.6
    Affected: 20.9.6_LI_Images
    Affected: 20.9.5.2.14
    Affected: 20.6.8
    Affected: 20.12.4.0.03
    Affected: 20.16.1
    Affected: 20.16.1_LI_Images
    Affected: 20.12.4_LI_Images
    Affected: 20.9.5.2.16
    Affected: 20.12.4.0.4
    Affected: 20.12.401
    Affected: 20.9.5.3
    Affected: 20.9.5.3_LI_Images
    Affected: 20.12.4.1_LI_Images
    Affected: 20.12.4.1
    Affected: 20.9.5.2.21
    Affected: 20.9.6.0.3
    Affected: 20.12.4.0.6
    Affected: 20.15.2_LI_Images
    Affected: 20.15.2
    Affected: 20.12.4_Monthly_ES5
    Affected: 20.12.5
    Affected: 20.12.5_LI_Images
    Affected: 20.9.7_LI _Images
    Affected: 20.9.7
    Affected: 20.15.3
    Affected: 20.15.3_ LI _Images
    Affected: 20.12.501
    Affected: 20.12.5.1_LI_Images
    Affected: 20.12.5.1
    Affected: 20.12.5.2_LI_Images
    Affected: 20.12.5.2
    Affected: 20.15.3.1
    Affected: 20.15.4_LI_Images
    Affected: 20.15.4
    Affected: 20.9.7.1_LI _Images
    Affected: 20.9.7.1
    Affected: 20.18.1
    Affected: 20.18.1_LI_Images
    Affected: 20.12.6_LI_Images
    Affected: 20.12.6
    Affected: 20.12.5.1.01
    Affected: 26.0.1
    Affected: 20.9.8
    Affected: 20.9.8_LI_Images
    Affected: 20.18.2
    Affected: 20.15.4.1_LI_Images
    Affected: 20.15.4.1
    Affected: 20.18.2_LI_Images
    Affected: 26.1.1
    Affected: 26.1.1_LI_Images
    Affected: 20.18.2.1_LI_Images
    Affected: 20.18.2.1
    Affected: 20.15.4.2_LI_Images
    Affected: 20.15.4.2
    Affected: 20.12.6.1
    Affected: 20.12.6.1_LI_Images
    Affected: 20.12.5.3
    Affected: 20.12.5.3_LI_Images
    Affected: 20.9.8.2_LI_Images
    Affected: 20.9.8.2
    Affected: 20.18.3
    Affected: 20.18.3_LI_Images
    Affected: 20.15.5
    Affected: 20.15.5_LI_Images
    Affected: 20.12.7
    Affected: 20.12.7_LI_Images
    Affected: 20.9.9
    Affected: 20.9.9_LI_Images
    Affected: 20.18.2.2
    Affected: 20.18.2.2_LI_Images
    Affected: 20.12.5.4
    Affected: 20.12.5.4_LI_ Images
    Affected: 20.12.7.1_LI_Images
    Affected: 20.12.6.2_LI_Images
    Affected: 20.12.7.1
    Affected: 20.15.5.1
    Affected: 20.15.4.3
    Affected: 20.15.4.3_LI_Images
    Affected: 20.15.5.1_LI_Images
    Affected: 20.12.6.2
    Affected: 20.15.5.2
    Affected: 20.15.5.2_LI_Images
    Affected: 26.1.1.1_LI_Images
    Affected: 20.15.4.4
    Affected: 20.15.4.4_LI_Images
    Affected: 26.1.1.1
    Affected: 20.9.9.1_LI_Images
    Affected: 20.9.9.1
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20262",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-06-15",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20262"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T03:55:46.594Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20262"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Catalyst SD-WAN Manager",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "20.1.12"
            },
            {
              "status": "affected",
              "version": "19.2.1"
            },
            {
              "status": "affected",
              "version": "18.4.4"
            },
            {
              "status": "affected",
              "version": "18.4.5"
            },
            {
              "status": "affected",
              "version": "20.1.1.1"
            },
            {
              "status": "affected",
              "version": "20.1.1"
            },
            {
              "status": "affected",
              "version": "19.3.0"
            },
            {
              "status": "affected",
              "version": "19.2.2"
            },
            {
              "status": "affected",
              "version": "19.2.099"
            },
            {
              "status": "affected",
              "version": "18.3.6"
            },
            {
              "status": "affected",
              "version": "18.3.7"
            },
            {
              "status": "affected",
              "version": "19.2.0"
            },
            {
              "status": "affected",
              "version": "18.3.8"
            },
            {
              "status": "affected",
              "version": "19.0.0"
            },
            {
              "status": "affected",
              "version": "19.1.0"
            },
            {
              "status": "affected",
              "version": "18.4.302"
            },
            {
              "status": "affected",
              "version": "18.4.303"
            },
            {
              "status": "affected",
              "version": "19.2.097"
            },
            {
              "status": "affected",
              "version": "19.2.098"
            },
            {
              "status": "affected",
              "version": "17.2.10"
            },
            {
              "status": "affected",
              "version": "18.3.6.1"
            },
            {
              "status": "affected",
              "version": "19.0.1a"
            },
            {
              "status": "affected",
              "version": "18.2.0"
            },
            {
              "status": "affected",
              "version": "18.4.3"
            },
            {
              "status": "affected",
              "version": "18.4.1"
            },
            {
              "status": "affected",
              "version": "17.2.8"
            },
            {
              "status": "affected",
              "version": "18.3.3.1"
            },
            {
              "status": "affected",
              "version": "18.4.0"
            },
            {
              "status": "affected",
              "version": "18.3.1"
            },
            {
              "status": "affected",
              "version": "17.2.6"
            },
            {
              "status": "affected",
              "version": "17.2.9"
            },
            {
              "status": "affected",
              "version": "18.3.4"
            },
            {
              "status": "affected",
              "version": "17.2.5"
            },
            {
              "status": "affected",
              "version": "18.3.1.1"
            },
            {
              "status": "affected",
              "version": "18.3.5"
            },
            {
              "status": "affected",
              "version": "18.4.0.1"
            },
            {
              "status": "affected",
              "version": "18.3.3"
            },
            {
              "status": "affected",
              "version": "17.2.7"
            },
            {
              "status": "affected",
              "version": "17.2.4"
            },
            {
              "status": "affected",
              "version": "18.3.0"
            },
            {
              "status": "affected",
              "version": "19.2.3"
            },
            {
              "status": "affected",
              "version": "18.4.501_ES"
            },
            {
              "status": "affected",
              "version": "20.3.1"
            },
            {
              "status": "affected",
              "version": "20.1.2"
            },
            {
              "status": "affected",
              "version": "19.2.929"
            },
            {
              "status": "affected",
              "version": "19.2.31"
            },
            {
              "status": "affected",
              "version": "20.3.2"
            },
            {
              "status": "affected",
              "version": "19.2.32"
            },
            {
              "status": "affected",
              "version": "20.3.2_925"
            },
            {
              "status": "affected",
              "version": "20.3.2.1"
            },
            {
              "status": "affected",
              "version": "20.3.2.1_927"
            },
            {
              "status": "affected",
              "version": "18.4.6"
            },
            {
              "status": "affected",
              "version": "20.1.2_937"
            },
            {
              "status": "affected",
              "version": "20.4.1"
            },
            {
              "status": "affected",
              "version": "20.3.2_928"
            },
            {
              "status": "affected",
              "version": "20.3.2_929"
            },
            {
              "status": "affected",
              "version": "20.4.1.0.1"
            },
            {
              "status": "affected",
              "version": "20.3.2.1_930"
            },
            {
              "status": "affected",
              "version": "19.2.4"
            },
            {
              "status": "affected",
              "version": "20.5.0.1.1"
            },
            {
              "status": "affected",
              "version": "20.4.1.1"
            },
            {
              "status": "affected",
              "version": "20.3.3"
            },
            {
              "status": "affected",
              "version": "19.2.4.0.1"
            },
            {
              "status": "affected",
              "version": "20.3.2_937"
            },
            {
              "status": "affected",
              "version": "20.3.3.1"
            },
            {
              "status": "affected",
              "version": "20.5.1"
            },
            {
              "status": "affected",
              "version": "20.1.3"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.4"
            },
            {
              "status": "affected",
              "version": "20.3.3.1.2"
            },
            {
              "status": "affected",
              "version": "20.3.3.1.1"
            },
            {
              "status": "affected",
              "version": "20.4.1.2"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.2"
            },
            {
              "status": "affected",
              "version": "20.4.1.1.5"
            },
            {
              "status": "affected",
              "version": "20.4.1.0.01"
            },
            {
              "status": "affected",
              "version": "20.4.1.0.02"
            },
            {
              "status": "affected",
              "version": "20.3.3.1.7"
            },
            {
              "status": "affected",
              "version": "20.3.3.1.5"
            },
            {
              "status": "affected",
              "version": "20.5.1.0.1"
            },
            {
              "status": "affected",
              "version": "20.3.3.1.10"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.8"
            },
            {
              "status": "affected",
              "version": "20.4.2"
            },
            {
              "status": "affected",
              "version": "20.4.2.0.1"
            },
            {
              "status": "affected",
              "version": "20.3.4"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.14"
            },
            {
              "status": "affected",
              "version": "19.2.4.0.8"
            },
            {
              "status": "affected",
              "version": "19.2.4.0.9"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.1"
            },
            {
              "status": "affected",
              "version": "20.3.2.0.5"
            },
            {
              "status": "affected",
              "version": "20.6.1"
            },
            {
              "status": "affected",
              "version": "20.5.1.0.2"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.17"
            },
            {
              "status": "affected",
              "version": "20.6.1.1"
            },
            {
              "status": "affected",
              "version": "20.6.0.18.3"
            },
            {
              "status": "affected",
              "version": "20.3.2.0.6"
            },
            {
              "status": "affected",
              "version": "20.6.0.18.4"
            },
            {
              "status": "affected",
              "version": "20.4.2.0.2"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.16"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.5"
            },
            {
              "status": "affected",
              "version": "20.6.1.0.1"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.6"
            },
            {
              "status": "affected",
              "version": "20.6.2"
            },
            {
              "status": "affected",
              "version": "20.7.1EFT2"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.9"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.11"
            },
            {
              "status": "affected",
              "version": "20.4.2.0.4"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.18"
            },
            {
              "status": "affected",
              "version": "20.7.1"
            },
            {
              "status": "affected",
              "version": "20.6.2.1"
            },
            {
              "status": "affected",
              "version": "20.3.4.1"
            },
            {
              "status": "affected",
              "version": "20.5.1.1"
            },
            {
              "status": "affected",
              "version": "20.4.2.1"
            },
            {
              "status": "affected",
              "version": "20.4.2.1.1"
            },
            {
              "status": "affected",
              "version": "20.3.4.1.1"
            },
            {
              "status": "affected",
              "version": "20.3.813"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.19"
            },
            {
              "status": "affected",
              "version": "20.4.2.2.1"
            },
            {
              "status": "affected",
              "version": "20.5.1.2"
            },
            {
              "status": "affected",
              "version": "20.3.4.2"
            },
            {
              "status": "affected",
              "version": "20.3.814"
            },
            {
              "status": "affected",
              "version": "20.4.2.2"
            },
            {
              "status": "affected",
              "version": "20.6.2.2"
            },
            {
              "status": "affected",
              "version": "20.3.4.2.1"
            },
            {
              "status": "affected",
              "version": "20.7.1.1"
            },
            {
              "status": "affected",
              "version": "20.3.4.1.2"
            },
            {
              "status": "affected",
              "version": "20.6.2.2.2"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.20"
            },
            {
              "status": "affected",
              "version": "20.6.2.2.3"
            },
            {
              "status": "affected",
              "version": "20.4.2.2.2"
            },
            {
              "status": "affected",
              "version": "20.3.5"
            },
            {
              "status": "affected",
              "version": "20.6.2.0.4"
            },
            {
              "status": "affected",
              "version": "20.4.2.2.3"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.24"
            },
            {
              "status": "affected",
              "version": "20.6.2.2.7"
            },
            {
              "status": "affected",
              "version": "20.6.3"
            },
            {
              "status": "affected",
              "version": "20.3.4.2.2"
            },
            {
              "status": "affected",
              "version": "20.4.2.2.4"
            },
            {
              "status": "affected",
              "version": "20.7.1.0.2"
            },
            {
              "status": "affected",
              "version": "20.8.1"
            },
            {
              "status": "affected",
              "version": "20.3.5.0.8"
            },
            {
              "status": "affected",
              "version": "20.3.5.0.9"
            },
            {
              "status": "affected",
              "version": "20.4.2.2.8"
            },
            {
              "status": "affected",
              "version": "20.3.5.0.7"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.7"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.5"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.10"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.2"
            },
            {
              "status": "affected",
              "version": "20.7.2"
            },
            {
              "status": "affected",
              "version": "20.9.1EFT2"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.11"
            },
            {
              "status": "affected",
              "version": "20.6.3.1"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.14"
            },
            {
              "status": "affected",
              "version": "20.6.4"
            },
            {
              "status": "affected",
              "version": "20.9.1"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.19"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.18"
            },
            {
              "status": "affected",
              "version": "20.3.6"
            },
            {
              "status": "affected",
              "version": "20.9.1.1"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.23"
            },
            {
              "status": "affected",
              "version": "20.6.4.0.4"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.25"
            },
            {
              "status": "affected",
              "version": "20.6.5"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.27"
            },
            {
              "status": "affected",
              "version": "20.9.2"
            },
            {
              "status": "affected",
              "version": "20.9.2.1"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.29"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.31"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.32"
            },
            {
              "status": "affected",
              "version": "20.10.1"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.33"
            },
            {
              "status": "affected",
              "version": "20.9.2.0.01"
            },
            {
              "status": "affected",
              "version": "20.9.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.10.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.3.7"
            },
            {
              "status": "affected",
              "version": "20.9.3"
            },
            {
              "status": "affected",
              "version": "20.6.5.1"
            },
            {
              "status": "affected",
              "version": "20.11.1"
            },
            {
              "status": "affected",
              "version": "20.11.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.3_LI_ Images"
            },
            {
              "status": "affected",
              "version": "20.6.3.1.1"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.2"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.2"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.3"
            },
            {
              "status": "affected",
              "version": "20.4.2.3"
            },
            {
              "status": "affected",
              "version": "20.6.3.2"
            },
            {
              "status": "affected",
              "version": "20.6.4.1"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.38"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.39"
            },
            {
              "status": "affected",
              "version": "20.3.5.1"
            },
            {
              "status": "affected",
              "version": "20.3.4.3"
            },
            {
              "status": "affected",
              "version": "20.9.3.1"
            },
            {
              "status": "affected",
              "version": "20.3.3.2"
            },
            {
              "status": "affected",
              "version": "20.6.5.2"
            },
            {
              "status": "affected",
              "version": "20.3.7.1"
            },
            {
              "status": "affected",
              "version": "20.10.1.1"
            },
            {
              "status": "affected",
              "version": "20.6.5.2.1"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.25"
            },
            {
              "status": "affected",
              "version": "20.6.2.2.4"
            },
            {
              "status": "affected",
              "version": "20.6.1.2"
            },
            {
              "status": "affected",
              "version": "20.11.1.1"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.5"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.26"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.3"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.40"
            },
            {
              "status": "affected",
              "version": "20.1.3.1"
            },
            {
              "status": "affected",
              "version": "20.9.2.2"
            },
            {
              "status": "affected",
              "version": "20.6.5.2.3"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.4"
            },
            {
              "status": "affected",
              "version": "20.6.5.3"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.41"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.7"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.5"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.4"
            },
            {
              "status": "affected",
              "version": "20.6.4.0.19"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.6"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.8"
            },
            {
              "status": "affected",
              "version": "20.6.3.3"
            },
            {
              "status": "affected",
              "version": "20.3.7.2"
            },
            {
              "status": "affected",
              "version": "20.6.5.4"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.7"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.12"
            },
            {
              "status": "affected",
              "version": "20.6.4.2"
            },
            {
              "status": "affected",
              "version": "20.6.5.5"
            },
            {
              "status": "affected",
              "version": "20.9.3.2"
            },
            {
              "status": "affected",
              "version": "20.11.1.2"
            },
            {
              "status": "affected",
              "version": "20.6.3.4"
            },
            {
              "status": "affected",
              "version": "20.10.1.2"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.9"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.16"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.45"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.10"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.17"
            },
            {
              "status": "affected",
              "version": "20.6.5.2.4"
            },
            {
              "status": "affected",
              "version": "20.6.4.0.21"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.18"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.46"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.47"
            },
            {
              "status": "affected",
              "version": "20.9.2.3"
            },
            {
              "status": "affected",
              "version": "20.9.3.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.21"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.20"
            },
            {
              "status": "affected",
              "version": "20.9.4_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.4"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.11"
            },
            {
              "status": "affected",
              "version": "20.12.1"
            },
            {
              "status": "affected",
              "version": "20.12.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.13"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.23"
            },
            {
              "status": "affected",
              "version": "20.6.5.2.8"
            },
            {
              "status": "affected",
              "version": "20.9.4.1"
            },
            {
              "status": "affected",
              "version": "20.9.4.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.25"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.24"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.14"
            },
            {
              "status": "affected",
              "version": "20.3.8"
            },
            {
              "status": "affected",
              "version": "20.6.6"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.26"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.51"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.29"
            },
            {
              "status": "affected",
              "version": "20.12.2"
            },
            {
              "status": "affected",
              "version": "20.12.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.6.6.0.1"
            },
            {
              "status": "affected",
              "version": "20.13.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.4.0.4"
            },
            {
              "status": "affected",
              "version": "20.13.1"
            },
            {
              "status": "affected",
              "version": "20.9.4.1.1"
            },
            {
              "status": "affected",
              "version": "20.9.5"
            },
            {
              "status": "affected",
              "version": "20.9.5_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.3_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.3"
            },
            {
              "status": "affected",
              "version": "20.9.4.1.3"
            },
            {
              "status": "affected",
              "version": "20.6.7"
            },
            {
              "status": "affected",
              "version": "20.9.5.1"
            },
            {
              "status": "affected",
              "version": "20.9.5.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.4.1.6"
            },
            {
              "status": "affected",
              "version": "20.14.1"
            },
            {
              "status": "affected",
              "version": "20.14.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.5.2"
            },
            {
              "status": "affected",
              "version": "20.9.5.2.1"
            },
            {
              "status": "affected",
              "version": "20.9.5.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.3.1"
            },
            {
              "status": "affected",
              "version": "20.12.4"
            },
            {
              "status": "affected",
              "version": "20.15.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.1"
            },
            {
              "status": "affected",
              "version": "20.9.5.1.4"
            },
            {
              "status": "affected",
              "version": "20.9.5.2.7"
            },
            {
              "status": "affected",
              "version": "20.9.5.2.13"
            },
            {
              "status": "affected",
              "version": "20.9.6"
            },
            {
              "status": "affected",
              "version": "20.9.6_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.5.2.14"
            },
            {
              "status": "affected",
              "version": "20.6.8"
            },
            {
              "status": "affected",
              "version": "20.12.4.0.03"
            },
            {
              "status": "affected",
              "version": "20.16.1"
            },
            {
              "status": "affected",
              "version": "20.16.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.4_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.5.2.16"
            },
            {
              "status": "affected",
              "version": "20.12.4.0.4"
            },
            {
              "status": "affected",
              "version": "20.12.401"
            },
            {
              "status": "affected",
              "version": "20.9.5.3"
            },
            {
              "status": "affected",
              "version": "20.9.5.3_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.4.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.4.1"
            },
            {
              "status": "affected",
              "version": "20.9.5.2.21"
            },
            {
              "status": "affected",
              "version": "20.9.6.0.3"
            },
            {
              "status": "affected",
              "version": "20.12.4.0.6"
            },
            {
              "status": "affected",
              "version": "20.15.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.2"
            },
            {
              "status": "affected",
              "version": "20.12.4_Monthly_ES5"
            },
            {
              "status": "affected",
              "version": "20.12.5"
            },
            {
              "status": "affected",
              "version": "20.12.5_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.7_LI _Images"
            },
            {
              "status": "affected",
              "version": "20.9.7"
            },
            {
              "status": "affected",
              "version": "20.15.3"
            },
            {
              "status": "affected",
              "version": "20.15.3_ LI _Images"
            },
            {
              "status": "affected",
              "version": "20.12.501"
            },
            {
              "status": "affected",
              "version": "20.12.5.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.5.1"
            },
            {
              "status": "affected",
              "version": "20.12.5.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.5.2"
            },
            {
              "status": "affected",
              "version": "20.15.3.1"
            },
            {
              "status": "affected",
              "version": "20.15.4_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.4"
            },
            {
              "status": "affected",
              "version": "20.9.7.1_LI _Images"
            },
            {
              "status": "affected",
              "version": "20.9.7.1"
            },
            {
              "status": "affected",
              "version": "20.18.1"
            },
            {
              "status": "affected",
              "version": "20.18.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.6_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.6"
            },
            {
              "status": "affected",
              "version": "20.12.5.1.01"
            },
            {
              "status": "affected",
              "version": "26.0.1"
            },
            {
              "status": "affected",
              "version": "20.9.8"
            },
            {
              "status": "affected",
              "version": "20.9.8_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.18.2"
            },
            {
              "status": "affected",
              "version": "20.15.4.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.4.1"
            },
            {
              "status": "affected",
              "version": "20.18.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "26.1.1"
            },
            {
              "status": "affected",
              "version": "26.1.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.18.2.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.18.2.1"
            },
            {
              "status": "affected",
              "version": "20.15.4.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.4.2"
            },
            {
              "status": "affected",
              "version": "20.12.6.1"
            },
            {
              "status": "affected",
              "version": "20.12.6.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.5.3"
            },
            {
              "status": "affected",
              "version": "20.12.5.3_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.8.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.8.2"
            },
            {
              "status": "affected",
              "version": "20.18.3"
            },
            {
              "status": "affected",
              "version": "20.18.3_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.5"
            },
            {
              "status": "affected",
              "version": "20.15.5_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.7"
            },
            {
              "status": "affected",
              "version": "20.12.7_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.9"
            },
            {
              "status": "affected",
              "version": "20.9.9_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.18.2.2"
            },
            {
              "status": "affected",
              "version": "20.18.2.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.5.4"
            },
            {
              "status": "affected",
              "version": "20.12.5.4_LI_ Images"
            },
            {
              "status": "affected",
              "version": "20.12.7.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.6.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.7.1"
            },
            {
              "status": "affected",
              "version": "20.15.5.1"
            },
            {
              "status": "affected",
              "version": "20.15.4.3"
            },
            {
              "status": "affected",
              "version": "20.15.4.3_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.5.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.6.2"
            },
            {
              "status": "affected",
              "version": "20.15.5.2"
            },
            {
              "status": "affected",
              "version": "20.15.5.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "26.1.1.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.4.4"
            },
            {
              "status": "affected",
              "version": "20.15.4.4_LI_Images"
            },
            {
              "status": "affected",
              "version": "26.1.1.1"
            },
            {
              "status": "affected",
              "version": "20.9.9.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.9.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.\r\n\r\nThis vulnerability exists because the affected software does not properly validate user-supplied input during a file upload process. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected API endpoint of the affected system. A successful exploit could allow the attacker to create or overwrite any file on the underlying operating system. This file could later be used to elevate to root. To exploit this vulnerability, the attacker must have valid credentials with at least a lower-privileged, single-task user account."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "In June 2026, the Cisco PSIRT became aware of limited exploitation of this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-15T16:21:09.696Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-sdwan-arbfw-c2rZvQ",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ"
        }
      ],
      "source": {
        "advisory": "cisco-sa-sdwan-arbfw-c2rZvQ",
        "defects": [
          "CSCwu18441"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20262",
    "datePublished": "2026-06-15T16:21:09.696Z",
    "dateReserved": "2025-10-08T11:59:15.402Z",
    "dateUpdated": "2026-06-17T03:55:46.594Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20243 (GCVE-0-2026-20243)

    Vulnerability from cvelistv5 – Published: 2026-07-01 16:30 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV ALZ Archive Processing Denial of Service Vulnerability
    Summary
    A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in ALZ files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains ALZ content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20243",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:19:13.065202Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:08.088Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in ALZ files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains ALZ content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:30:20.848Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwu18798"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV ALZ Archive Processing Denial of Service Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20243",
    "datePublished": "2026-07-01T16:30:20.848Z",
    "dateReserved": "2025-10-08T11:59:15.400Z",
    "dateUpdated": "2026-07-01T17:25:08.088Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20244 (GCVE-0-2026-20244)

    Vulnerability from cvelistv5 – Published: 2026-07-01 16:28 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV DMG File Processing Denial of Service Vulnerability
    Summary
    A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in DMG files during scanning, which may result in an integer overflow on 32-bit platforms only. An attacker could exploit this vulnerability by submitting a crafted file that contains DMG content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20244",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:17:32.499689Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:08.394Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in DMG files during scanning, which may result in an integer overflow on 32-bit platforms only. An attacker could exploit this vulnerability by submitting a crafted file that contains DMG content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:28:27.613Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwu22472"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV DMG File Processing Denial of Service Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20244",
    "datePublished": "2026-07-01T16:28:27.613Z",
    "dateReserved": "2025-10-08T11:59:15.400Z",
    "dateUpdated": "2026-07-01T17:25:08.394Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20215 (GCVE-0-2026-20215)

    Vulnerability from cvelistv5 – Published: 2026-07-01 16:28 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability
    Summary
    A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in 7z files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains 7z content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20215",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:17:41.483279Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:08.547Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in 7z files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains 7z\u0026nbsp;content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:28:09.844Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwt62781"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20215",
    "datePublished": "2026-07-01T16:28:09.844Z",
    "dateReserved": "2025-10-08T11:59:15.398Z",
    "dateUpdated": "2026-07-01T17:25:08.547Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20217 (GCVE-0-2026-20217)

    Vulnerability from cvelistv5 – Published: 2026-07-01 16:28 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability
    Summary
    A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20217",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:17:51.378262Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:08.697Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:28:03.720Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwt57454"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20217",
    "datePublished": "2026-07-01T16:28:03.720Z",
    "dateReserved": "2025-10-08T11:59:15.398Z",
    "dateUpdated": "2026-07-01T17:25:08.697Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20216 (GCVE-0-2026-20216)

    Vulnerability from cvelistv5 – Published: 2026-07-01 16:27 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability
    Summary
    A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-770 - Allocation of Resources Without Limits or Throttling
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20216",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:18:03.116587Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:08.850Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:27:51.314Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwt44538"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20216",
    "datePublished": "2026-07-01T16:27:51.314Z",
    "dateReserved": "2025-10-08T11:59:15.398Z",
    "dateUpdated": "2026-07-01T17:25:08.850Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20213 (GCVE-0-2026-20213)

    Vulnerability from cvelistv5 – Published: 2026-07-01 16:27 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability
    Summary
    A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20213",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:18:10.967118Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:08.998Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PE files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains PE content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:27:38.657Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwt62774"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20213",
    "datePublished": "2026-07-01T16:27:38.657Z",
    "dateReserved": "2025-10-08T11:59:15.398Z",
    "dateUpdated": "2026-07-01T17:25:08.998Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20214 (GCVE-0-2026-20214)

    Vulnerability from cvelistv5 – Published: 2026-07-01 16:27 – Updated: 2026-07-01 17:25
    VLAI
    Title
    ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability
    Summary
    A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains portable executable content compressed with FSG to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Secure Endpoint Affected: 7.0.5
    Affected: 6.2.19
    Affected: 7.3.3
    Affected: 7.2.13
    Affected: 6.1.5
    Affected: 6.3.1
    Affected: 6.2.5
    Affected: 7.3.5
    Affected: 6.2.1
    Affected: 7.2.7
    Affected: 7.1.1
    Affected: 6.3.5
    Affected: 6.2.9
    Affected: 7.3.1
    Affected: 6.1.7
    Affected: 7.2.11
    Affected: 7.2.3
    Affected: 7.1.5
    Affected: 6.3.3
    Affected: 7.3.9
    Affected: 6.2.3
    Affected: 6.1.9
    Affected: 6.0.9
    Affected: 7.2.5
    Affected: 6.0.7
    Affected: 6.3.7
    Affected: 1.12.3
    Affected: 1.8.0
    Affected: 1.11.1
    Affected: 1.12.4
    Affected: 1.10.0
    Affected: 1.12.0
    Affected: 1.8.1
    Affected: 1.10.1
    Affected: 1.12.1
    Affected: 1.12.6
    Affected: 1.14.0
    Affected: 1.10.2
    Affected: 1.12.7
    Affected: 1.12.2
    Affected: 1.6.0
    Affected: 1.9.0
    Affected: 1.11.0
    Affected: 1.7.0
    Affected: 1.13.0
    Affected: 1.8.4
    Affected: 1.13.1
    Affected: 1.9.1
    Affected: 1.12.5
    Affected: 1.13.2
    Affected: 8.1.7.21512
    Affected: 8.1.7
    Affected: 8.1.5
    Affected: 8.1.3.21242
    Affected: 8.1.3
    Affected: 8.1.5.21322
    Affected: 8.1.7.21417
    Affected: 1.14.1
    Affected: 1.15.1
    Affected: 1.15.2
    Affected: 1.15.3
    Affected: 1.15.4
    Affected: 1.15.5
    Affected: 1.15.6
    Affected: 1.16.0
    Affected: 1.16.1
    Affected: 1.16.2
    Affected: 1.16.3
    Affected: 1.18.0
    Affected: 1.18.1
    Affected: 1.20.0
    Affected: 1.21.0
    Affected: 1.21.1
    Affected: 1.21.2
    Affected: 1.21.3
    Affected: 1.22.0
    Affected: 1.22.1
    Affected: 1.22.2
    Affected: 1.22.3
    Affected: 1.22.4
    Affected: 1.24.0
    Affected: 1.24.1
    Affected: 1.24.2
    Affected: 1.24.3
    Affected: 1.24.4
    Affected: 1.26.0
    Affected: 1.24.5
    Affected: 1.26.1
    Affected: 1.27.0
    Affected: 1.15.0
    Affected: 1.17.0
    Affected: 1.17.1
    Affected: 1.17.2
    Affected: 1.19.0
    Affected: 1.20.1
    Affected: 1.20.2
    Affected: 1.20.3
    Affected: 1.20.4
    Affected: 1.20.5
    Affected: 1.20.6
    Affected: 1.23.0
    Affected: 1.23.1
    Affected: 1.20.7
    Affected: 1.20.8
    Affected: 1.25.0
    Affected: 1.25.1
    Affected: 1.25.2
    Affected: 1.27.1
    Affected: 1.27.2
    Affected: 7.3.13
    Affected: 7.3.15
    Affected: 7.4.1
    Affected: 7.4.1.20425
    Affected: 7.4.1.20439
    Affected: 7.4.3
    Affected: 7.4.3.20679
    Affected: 7.4.5
    Affected: 7.5.1.20813
    Affected: 7.5.1.20833
    Affected: 7.5.3
    Affected: 7.5.5
    Affected: 8.0.1.21160
    Affected: 8.0.1.21164
    Affected: 7.5.7
    Affected: 7.5.9
    Affected: 7.5.11
    Affected: 8.1.7.21585
    Affected: 7.5.13.21586
    Affected: 7.5.13.21598
    Affected: 8.2.1.21612
    Affected: 8.2.1.21650
    Affected: 7.5.15.21611
    Affected: 7.5.17.21680
    Affected: 8.2.3.30119
    Affected: 8.2.4.30130
    Affected: 8.4.0
    Affected: 7.5.19
    Affected: 8.4.1.30298
    Affected: 8.4.2.30317
    Affected: 8.4.1.30307
    Affected: 7.5.20
    Affected: 8.4.3
    Affected: 8.4.4.30419
    Affected: 8.4.4.30467
    Affected: 7.5.21.21732
    Affected: 8.4.5.30483
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20214",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:18:19.481926Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:09.148Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains portable executable content compressed with FSG to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:27:33.622Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-88cFYyxR",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-88cFYyxR",
        "defects": [
          "CSCwt62779"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20214",
    "datePublished": "2026-07-01T16:27:33.622Z",
    "dateReserved": "2025-10-08T11:59:15.398Z",
    "dateUpdated": "2026-07-01T17:25:09.148Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20191 (GCVE-0-2026-20191)

    Vulnerability from cvelistv5 – Published: 2026-07-01 16:27 – Updated: 2026-07-01 17:25
    VLAI
    Title
    Cisco Catalyst Center Arbitrary File Read Vulnerability
    Summary
    A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.  This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Catalyst Center Affected: 2.3.7.0-VA
    Affected: 2.3.7.5-VA
    Affected: 2.3.7.6-VA
    Affected: 2.3.7.7-VA
    Affected: 2.3.7.9-VA
    Affected: 3.1.3
    Affected: 3.1.3-VA
    Affected: 2.3.7.10-VA
    Affected: 3.1.5
    Affected: 3.1.5-VA
    Affected: 3.1.5-VA on AWS
    Affected: 3.1.5-RevUp
    Affected: 3.1.6
    Affected: 3.1.6-VA
    Affected: 3.1.6-BETA
    Affected: 3.1.6-GSMU100
    Affected: 3.1.6-VA-GSMU100
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20191",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:18:27.744122Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:09.294Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Catalyst Center",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "2.3.7.0-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.5-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.6-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.7-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.9-VA"
            },
            {
              "status": "affected",
              "version": "3.1.3"
            },
            {
              "status": "affected",
              "version": "3.1.3-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.10-VA"
            },
            {
              "status": "affected",
              "version": "3.1.5"
            },
            {
              "status": "affected",
              "version": "3.1.5-VA"
            },
            {
              "status": "affected",
              "version": "3.1.5-VA on AWS"
            },
            {
              "status": "affected",
              "version": "3.1.5-RevUp"
            },
            {
              "status": "affected",
              "version": "3.1.6"
            },
            {
              "status": "affected",
              "version": "3.1.6-VA"
            },
            {
              "status": "affected",
              "version": "3.1.6-BETA"
            },
            {
              "status": "affected",
              "version": "3.1.6-GSMU100"
            },
            {
              "status": "affected",
              "version": "3.1.6-VA-GSMU100"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.\u0026nbsp;\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:27:32.642Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-catc-file-read-wLH2vf8X",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X"
        }
      ],
      "source": {
        "advisory": "cisco-sa-catc-file-read-wLH2vf8X",
        "defects": [
          "CSCwt73509"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Catalyst Center Arbitrary File Read Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20191",
    "datePublished": "2026-07-01T16:27:32.642Z",
    "dateReserved": "2025-10-08T11:59:15.395Z",
    "dateUpdated": "2026-07-01T17:25:09.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20178 (GCVE-0-2026-20178)

    Vulnerability from cvelistv5 – Published: 2026-06-17 16:28 – Updated: 2026-06-17 18:13
    VLAI
    Summary
    A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker to redirect users to a malicious webpage. Cisco has addressed this vulnerability in the Cisco Webex App, and no customer action is needed. This vulnerability existed due to improper input validation of URL parameters in an HTTP request. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to click a crafted URL. A successful exploit could have allowed the attacker to redirect a user to a malicious website.
    Severity
    4.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
    Assigner
    References
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20178",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T18:13:20.277003Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T18:13:35.374Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Webex App",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker to redirect users to a malicious webpage. Cisco has addressed this vulnerability in the Cisco Webex App, and no customer action is needed.\r\n\r This vulnerability existed due to improper input validation of URL parameters in an HTTP request. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to click a crafted URL. A successful exploit could have allowed the attacker to redirect a user to a malicious website."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T16:28:34.825Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-webex-app-redirect-KOyxhffH",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-redirect-KOyxhffH"
        }
      ],
      "source": {
        "advisory": "cisco-sa-webex-app-redirect-KOyxhffH",
        "defects": [
          "CSCwt98312"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20178",
    "datePublished": "2026-06-17T16:28:34.825Z",
    "dateReserved": "2025-10-08T11:59:15.392Z",
    "dateUpdated": "2026-06-17T18:13:35.374Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20246 (GCVE-0-2026-20246)

    Vulnerability from cvelistv5 – Published: 2026-06-17 16:17 – Updated: 2026-06-17 17:17
    VLAI
    Title
    Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability
    Summary
    A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this vulnerability by using certain commands at the CLI. A successful exploit could allow the attacker to elevate privileges to root.
    Severity
    6 (Medium)
    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Umbrella Insights Virtual Appliance Affected: 2.6.0
    Affected: 2.5.6
    Affected: 2.5
    Affected: 2.4.12
    Affected: 2.7
    Affected: 2.6.2
    Affected: 2.5.5
    Affected: 2.5.4
    Affected: 2.8
    Affected: 2.6.1
    Affected: 2.5.7
    Affected: 1.5.4
    Affected: 1.5.5
    Affected: 1.5.6
    Affected: 2.0.0
    Affected: 2.0.2
    Affected: 2.0.3
    Affected: 2.1.0
    Affected: 2.1.2
    Affected: 2.1.4
    Affected: 2.1.5
    Affected: 2.2
    Affected: 2.2.1
    Affected: 2.3
    Affected: 2.3.1
    Affected: 2.4
    Affected: 2.4.4
    Affected: 2.4.6
    Affected: 2.8.9
    Affected: 3.0
    Affected: 3.1
    Affected: 3.2
    Affected: 2.8.1
    Affected: 2.8.2
    Affected: 2.8.3
    Affected: 2.8.4
    Affected: 2.8.5
    Affected: 3.0.1
    Affected: 3.0.2
    Affected: 3.0.4
    Affected: 3.0.5
    Affected: 3.1.1
    Affected: 3.1.2
    Affected: 3.1.3
    Affected: 3.1.4
    Affected: 3.2.1
    Affected: 3.2.2
    Affected: 3.2.3
    Affected: 3.3
    Affected: 3.3.1
    Affected: 3.3.2
    Affected: 3.3.3
    Affected: 3.3.4
    Affected: 3.4
    Affected: 3.4.1
    Affected: 3.4.2
    Affected: 3.4.3
    Affected: 3.4.4
    Affected: 3.4.5
    Affected: 3.4.6
    Affected: 3.5
    Affected: 2.7.1
    Affected: 2.7.2
    Affected: 2.7.6
    Affected: 2.7.9
    Affected: 2.7.10
    Affected: 3.5.1
    Affected: 3.5.2
    Affected: 3.6.1
    Affected: 3.6.2
    Affected: 3.7
    Affected: 3.7.1
    Affected: 3.8.3
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20246",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T17:15:44.900787Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T17:17:13.797Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Umbrella Insights Virtual Appliance",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.0"
            },
            {
              "status": "affected",
              "version": "2.5.6"
            },
            {
              "status": "affected",
              "version": "2.5"
            },
            {
              "status": "affected",
              "version": "2.4.12"
            },
            {
              "status": "affected",
              "version": "2.7"
            },
            {
              "status": "affected",
              "version": "2.6.2"
            },
            {
              "status": "affected",
              "version": "2.5.5"
            },
            {
              "status": "affected",
              "version": "2.5.4"
            },
            {
              "status": "affected",
              "version": "2.8"
            },
            {
              "status": "affected",
              "version": "2.6.1"
            },
            {
              "status": "affected",
              "version": "2.5.7"
            },
            {
              "status": "affected",
              "version": "1.5.4"
            },
            {
              "status": "affected",
              "version": "1.5.5"
            },
            {
              "status": "affected",
              "version": "1.5.6"
            },
            {
              "status": "affected",
              "version": "2.0.0"
            },
            {
              "status": "affected",
              "version": "2.0.2"
            },
            {
              "status": "affected",
              "version": "2.0.3"
            },
            {
              "status": "affected",
              "version": "2.1.0"
            },
            {
              "status": "affected",
              "version": "2.1.2"
            },
            {
              "status": "affected",
              "version": "2.1.4"
            },
            {
              "status": "affected",
              "version": "2.1.5"
            },
            {
              "status": "affected",
              "version": "2.2"
            },
            {
              "status": "affected",
              "version": "2.2.1"
            },
            {
              "status": "affected",
              "version": "2.3"
            },
            {
              "status": "affected",
              "version": "2.3.1"
            },
            {
              "status": "affected",
              "version": "2.4"
            },
            {
              "status": "affected",
              "version": "2.4.4"
            },
            {
              "status": "affected",
              "version": "2.4.6"
            },
            {
              "status": "affected",
              "version": "2.8.9"
            },
            {
              "status": "affected",
              "version": "3.0"
            },
            {
              "status": "affected",
              "version": "3.1"
            },
            {
              "status": "affected",
              "version": "3.2"
            },
            {
              "status": "affected",
              "version": "2.8.1"
            },
            {
              "status": "affected",
              "version": "2.8.2"
            },
            {
              "status": "affected",
              "version": "2.8.3"
            },
            {
              "status": "affected",
              "version": "2.8.4"
            },
            {
              "status": "affected",
              "version": "2.8.5"
            },
            {
              "status": "affected",
              "version": "3.0.1"
            },
            {
              "status": "affected",
              "version": "3.0.2"
            },
            {
              "status": "affected",
              "version": "3.0.4"
            },
            {
              "status": "affected",
              "version": "3.0.5"
            },
            {
              "status": "affected",
              "version": "3.1.1"
            },
            {
              "status": "affected",
              "version": "3.1.2"
            },
            {
              "status": "affected",
              "version": "3.1.3"
            },
            {
              "status": "affected",
              "version": "3.1.4"
            },
            {
              "status": "affected",
              "version": "3.2.1"
            },
            {
              "status": "affected",
              "version": "3.2.2"
            },
            {
              "status": "affected",
              "version": "3.2.3"
            },
            {
              "status": "affected",
              "version": "3.3"
            },
            {
              "status": "affected",
              "version": "3.3.1"
            },
            {
              "status": "affected",
              "version": "3.3.2"
            },
            {
              "status": "affected",
              "version": "3.3.3"
            },
            {
              "status": "affected",
              "version": "3.3.4"
            },
            {
              "status": "affected",
              "version": "3.4"
            },
            {
              "status": "affected",
              "version": "3.4.1"
            },
            {
              "status": "affected",
              "version": "3.4.2"
            },
            {
              "status": "affected",
              "version": "3.4.3"
            },
            {
              "status": "affected",
              "version": "3.4.4"
            },
            {
              "status": "affected",
              "version": "3.4.5"
            },
            {
              "status": "affected",
              "version": "3.4.6"
            },
            {
              "status": "affected",
              "version": "3.5"
            },
            {
              "status": "affected",
              "version": "2.7.1"
            },
            {
              "status": "affected",
              "version": "2.7.2"
            },
            {
              "status": "affected",
              "version": "2.7.6"
            },
            {
              "status": "affected",
              "version": "2.7.9"
            },
            {
              "status": "affected",
              "version": "2.7.10"
            },
            {
              "status": "affected",
              "version": "3.5.1"
            },
            {
              "status": "affected",
              "version": "3.5.2"
            },
            {
              "status": "affected",
              "version": "3.6.1"
            },
            {
              "status": "affected",
              "version": "3.6.2"
            },
            {
              "status": "affected",
              "version": "3.7"
            },
            {
              "status": "affected",
              "version": "3.7.1"
            },
            {
              "status": "affected",
              "version": "3.8.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this vulnerability by using certain commands at the CLI. A successful exploit could allow the attacker to elevate privileges to root."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "Improper Privilege Management",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T16:17:13.708Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-umbrella-priv-esc-F4wJB7AU",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-priv-esc-F4wJB7AU"
        }
      ],
      "source": {
        "advisory": "cisco-sa-umbrella-priv-esc-F4wJB7AU",
        "defects": [
          "CSCwt75291"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20246",
    "datePublished": "2026-06-17T16:17:13.708Z",
    "dateReserved": "2025-10-08T11:59:15.400Z",
    "dateUpdated": "2026-06-17T17:17:13.797Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20220 (GCVE-0-2026-20220)

    Vulnerability from cvelistv5 – Published: 2026-06-17 16:17 – Updated: 2026-06-17 17:16
    VLAI
    Title
    Cisco Crosswork Network Controller Remote Code Execution Vulnerability
    Summary
    A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to insufficient input validation in the configuration template engine of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system in limited areas of the file system. This vulnerability affects only areas of the operating system for which the template user has write permissions.  To exploit this vulnerability, the attacker must have valid template user credentials with write permissions. Template users with read permissions cannot exploit this vulnerability. 
    Severity
    6.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Crosswork Network Change Automation Affected: 3.0.0
    Affected: 3.0.1
    Affected: 1.0.0
    Affected: 2.0.0
    Affected: 2.0.1
    Affected: 3.0.2
    Affected: 2.0.2
    Affected: 3.0.3
    Affected: 4.0.0
    Affected: 4.1.0
    Affected: 4.5.0
    Affected: 4.1.1
    Affected: 5.0.0
    Affected: 4.5.1
    Affected: 4.1.2
    Affected: 5.0.1
    Affected: 4.5.2
    Affected: 5.0.2
    Affected: 4.1.3
    Affected: 6.0.0
    Affected: 7.0.0
    Affected: 4.1.4
    Affected: 6.0.2
    Affected: 5.0.3
    Affected: 6.0.3
    Affected: 5.0.4
    Affected: 7.0.1
    Affected: 6.0.4
    Affected: 7.0.2
    Affected: 7.1.0
    Affected: 5.0.5
    Affected: 7.0.3
    Affected: 7.0.4
    Affected: 7.1.1
    Affected: 7.0.5
    Affected: 7.2.0
    Affected: 7.1.2
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20220",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T17:13:43.754531Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T17:16:59.052Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Crosswork Network Change Automation",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.0.0"
            },
            {
              "status": "affected",
              "version": "3.0.1"
            },
            {
              "status": "affected",
              "version": "1.0.0"
            },
            {
              "status": "affected",
              "version": "2.0.0"
            },
            {
              "status": "affected",
              "version": "2.0.1"
            },
            {
              "status": "affected",
              "version": "3.0.2"
            },
            {
              "status": "affected",
              "version": "2.0.2"
            },
            {
              "status": "affected",
              "version": "3.0.3"
            },
            {
              "status": "affected",
              "version": "4.0.0"
            },
            {
              "status": "affected",
              "version": "4.1.0"
            },
            {
              "status": "affected",
              "version": "4.5.0"
            },
            {
              "status": "affected",
              "version": "4.1.1"
            },
            {
              "status": "affected",
              "version": "5.0.0"
            },
            {
              "status": "affected",
              "version": "4.5.1"
            },
            {
              "status": "affected",
              "version": "4.1.2"
            },
            {
              "status": "affected",
              "version": "5.0.1"
            },
            {
              "status": "affected",
              "version": "4.5.2"
            },
            {
              "status": "affected",
              "version": "5.0.2"
            },
            {
              "status": "affected",
              "version": "4.1.3"
            },
            {
              "status": "affected",
              "version": "6.0.0"
            },
            {
              "status": "affected",
              "version": "7.0.0"
            },
            {
              "status": "affected",
              "version": "4.1.4"
            },
            {
              "status": "affected",
              "version": "6.0.2"
            },
            {
              "status": "affected",
              "version": "5.0.3"
            },
            {
              "status": "affected",
              "version": "6.0.3"
            },
            {
              "status": "affected",
              "version": "5.0.4"
            },
            {
              "status": "affected",
              "version": "7.0.1"
            },
            {
              "status": "affected",
              "version": "6.0.4"
            },
            {
              "status": "affected",
              "version": "7.0.2"
            },
            {
              "status": "affected",
              "version": "7.1.0"
            },
            {
              "status": "affected",
              "version": "5.0.5"
            },
            {
              "status": "affected",
              "version": "7.0.3"
            },
            {
              "status": "affected",
              "version": "7.0.4"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "7.2.0"
            },
            {
              "status": "affected",
              "version": "7.1.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an\u0026nbsp;authenticated, remote attacker to execute arbitrary commands on an affected device.\r\n\r\nThis vulnerability is due to insufficient input validation in the configuration\u0026nbsp;template engine of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system in limited areas of the file system. This vulnerability affects only areas of the operating system for which the template user has write permissions.\u0026nbsp;\r\nTo exploit this vulnerability, the attacker must have valid template user credentials with write permissions. Template users with read permissions cannot exploit this vulnerability.\u0026nbsp;"
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-74",
              "description": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T16:17:06.545Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-cnc-inj-QNMeEmxk",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnc-inj-QNMeEmxk"
        }
      ],
      "source": {
        "advisory": "cisco-sa-cnc-inj-QNMeEmxk",
        "defects": [
          "CSCwt44379"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Crosswork Network Controller Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20220",
    "datePublished": "2026-06-17T16:17:06.545Z",
    "dateReserved": "2025-10-08T11:59:15.398Z",
    "dateUpdated": "2026-06-17T17:16:59.052Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20190 (GCVE-0-2026-20190)

    Vulnerability from cvelistv5 – Published: 2026-06-17 16:17 – Updated: 2026-06-17 17:16
    VLAI
    Title
    Cisco Identity Services Engine Information Disclosure Vulnerability
    Summary
    A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Identity Services Engine Software Affected: 3.4.0
    Affected: 3.4 Patch 1
    Affected: 3.4 Patch 2
    Affected: 3.4 Patch 3
    Affected: 3.5.0
    Affected: 3.4 Patch 4
    Affected: 3.5 Patch 1
    Affected: 3.4 Patch 5
    Affected: 3.5 Patch 2
    		Create a notification for this product.
    Cisco Cisco ISE Passive Identity Connector Affected: 3.4.0
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20190",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T17:14:11.061077Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T17:16:45.425Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Identity Services Engine Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.4.0"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.5.0"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 4"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 5"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco ISE Passive Identity Connector",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.4.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device.\r\n\r\nThis vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "Improper Authorization",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T16:17:04.911Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-ise-multi-G5WP8vv",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv"
        }
      ],
      "source": {
        "advisory": "cisco-sa-ise-multi-G5WP8vv",
        "defects": [
          "CSCwt22936"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Cisco Identity Services Engine Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20190",
    "datePublished": "2026-06-17T16:17:04.911Z",
    "dateReserved": "2025-10-08T11:59:15.395Z",
    "dateUpdated": "2026-06-17T17:16:45.425Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20181 (GCVE-0-2026-20181)

    Vulnerability from cvelistv5 – Published: 2026-06-17 16:16 – Updated: 2026-06-18 03:56
    VLAI
    Title
    Cisco Identity Services Engine Remote Code Execution Vulnerability
    Summary
    A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. In single-node deployments, successful exploitation of this vulnerability could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.
    Severity
    9.1 (Critical)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Identity Services Engine Software Affected: 3.1.0
    Affected: 3.1.0 p1
    Affected: 3.1.0 p3
    Affected: 3.1.0 p2
    Affected: 3.2.0
    Affected: 3.1.0 p4
    Affected: 3.1.0 p5
    Affected: 3.2.0 p1
    Affected: 3.1.0 p6
    Affected: 3.2.0 p2
    Affected: 3.1.0 p7
    Affected: 3.3.0
    Affected: 3.2.0 p3
    Affected: 3.2.0 p4
    Affected: 3.1.0 p8
    Affected: 3.2.0 p5
    Affected: 3.2.0 p6
    Affected: 3.1.0 p9
    Affected: 3.3 Patch 2
    Affected: 3.3 Patch 1
    Affected: 3.3 Patch 3
    Affected: 3.4.0
    Affected: 3.2.0 p7
    Affected: 3.3 Patch 4
    Affected: 3.4 Patch 1
    Affected: 3.1.0 p10
    Affected: 3.3 Patch 5
    Affected: 3.3 Patch 6
    Affected: 3.4 Patch 2
    Affected: 3.3 Patch 7
    Affected: 3.4 Patch 3
    Affected: 3.5.0
    Affected: 3.4 Patch 4
    Affected: 3.3 Patch 8
    Affected: 3.2 Patch 8
    Affected: 3.5 Patch 1
    Affected: 3.3 Patch 9
    Affected: 3.2 Patch 9
    Affected: 3.4 Patch 5
    Affected: 3.5 Patch 3
    Affected: 3.5 Patch 2
    Affected: 3.3 Patch 10
    Affected: 3.2 Patch 10
    Affected: 3.1.0 p11
    		Create a notification for this product.
    Cisco Cisco ISE Passive Identity Connector Affected: 3.2.0
    Affected: 3.1.0
    Affected: 3.3.0
    Affected: 3.4.0
    Affected: 3.5.0
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20181",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-18T03:56:44.983Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Identity Services Engine Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.0"
            },
            {
              "status": "affected",
              "version": "3.1.0 p1"
            },
            {
              "status": "affected",
              "version": "3.1.0 p3"
            },
            {
              "status": "affected",
              "version": "3.1.0 p2"
            },
            {
              "status": "affected",
              "version": "3.2.0"
            },
            {
              "status": "affected",
              "version": "3.1.0 p4"
            },
            {
              "status": "affected",
              "version": "3.1.0 p5"
            },
            {
              "status": "affected",
              "version": "3.2.0 p1"
            },
            {
              "status": "affected",
              "version": "3.1.0 p6"
            },
            {
              "status": "affected",
              "version": "3.2.0 p2"
            },
            {
              "status": "affected",
              "version": "3.1.0 p7"
            },
            {
              "status": "affected",
              "version": "3.3.0"
            },
            {
              "status": "affected",
              "version": "3.2.0 p3"
            },
            {
              "status": "affected",
              "version": "3.2.0 p4"
            },
            {
              "status": "affected",
              "version": "3.1.0 p8"
            },
            {
              "status": "affected",
              "version": "3.2.0 p5"
            },
            {
              "status": "affected",
              "version": "3.2.0 p6"
            },
            {
              "status": "affected",
              "version": "3.1.0 p9"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.4.0"
            },
            {
              "status": "affected",
              "version": "3.2.0 p7"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 4"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.1.0 p10"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 5"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 6"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 7"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.5.0"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 4"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 8"
            },
            {
              "status": "affected",
              "version": "3.2 Patch 8"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 9"
            },
            {
              "status": "affected",
              "version": "3.2 Patch 9"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 5"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 10"
            },
            {
              "status": "affected",
              "version": "3.2 Patch 10"
            },
            {
              "status": "affected",
              "version": "3.1.0 p11"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco ISE Passive Identity Connector",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.2.0"
            },
            {
              "status": "affected",
              "version": "3.1.0"
            },
            {
              "status": "affected",
              "version": "3.3.0"
            },
            {
              "status": "affected",
              "version": "3.4.0"
            },
            {
              "status": "affected",
              "version": "3.5.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. In single-node deployments, successful exploitation of this vulnerability could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T16:16:56.706Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-ise-multi-G5WP8vv",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv"
        }
      ],
      "source": {
        "advisory": "cisco-sa-ise-multi-G5WP8vv",
        "defects": [
          "CSCwt22913"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Cisco Identity Services Engine Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20181",
    "datePublished": "2026-06-17T16:16:56.706Z",
    "dateReserved": "2025-10-08T11:59:15.393Z",
    "dateUpdated": "2026-06-18T03:56:44.983Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-20262 (GCVE-0-2026-20262)

    Vulnerability from cvelistv5 – Published: 2026-06-15 16:21 – Updated: 2026-06-17 03:55
    VLAI CISA KEVIntel
    Title
    Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
    Summary
    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This vulnerability exists because the affected software does not properly validate user-supplied input during a file upload process. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected API endpoint of the affected system. A successful exploit could allow the attacker to create or overwrite any file on the underlying operating system. This file could later be used to elevate to root. To exploit this vulnerability, the attacker must have valid credentials with at least a lower-privileged, single-task user account.
    Severity
    6.5 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
    SSVC
    Exploitation: active Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Cisco Cisco Catalyst SD-WAN Manager Affected: 20.1.12
    Affected: 19.2.1
    Affected: 18.4.4
    Affected: 18.4.5
    Affected: 20.1.1.1
    Affected: 20.1.1
    Affected: 19.3.0
    Affected: 19.2.2
    Affected: 19.2.099
    Affected: 18.3.6
    Affected: 18.3.7
    Affected: 19.2.0
    Affected: 18.3.8
    Affected: 19.0.0
    Affected: 19.1.0
    Affected: 18.4.302
    Affected: 18.4.303
    Affected: 19.2.097
    Affected: 19.2.098
    Affected: 17.2.10
    Affected: 18.3.6.1
    Affected: 19.0.1a
    Affected: 18.2.0
    Affected: 18.4.3
    Affected: 18.4.1
    Affected: 17.2.8
    Affected: 18.3.3.1
    Affected: 18.4.0
    Affected: 18.3.1
    Affected: 17.2.6
    Affected: 17.2.9
    Affected: 18.3.4
    Affected: 17.2.5
    Affected: 18.3.1.1
    Affected: 18.3.5
    Affected: 18.4.0.1
    Affected: 18.3.3
    Affected: 17.2.7
    Affected: 17.2.4
    Affected: 18.3.0
    Affected: 19.2.3
    Affected: 18.4.501_ES
    Affected: 20.3.1
    Affected: 20.1.2
    Affected: 19.2.929
    Affected: 19.2.31
    Affected: 20.3.2
    Affected: 19.2.32
    Affected: 20.3.2_925
    Affected: 20.3.2.1
    Affected: 20.3.2.1_927
    Affected: 18.4.6
    Affected: 20.1.2_937
    Affected: 20.4.1
    Affected: 20.3.2_928
    Affected: 20.3.2_929
    Affected: 20.4.1.0.1
    Affected: 20.3.2.1_930
    Affected: 19.2.4
    Affected: 20.5.0.1.1
    Affected: 20.4.1.1
    Affected: 20.3.3
    Affected: 19.2.4.0.1
    Affected: 20.3.2_937
    Affected: 20.3.3.1
    Affected: 20.5.1
    Affected: 20.1.3
    Affected: 20.3.3.0.4
    Affected: 20.3.3.1.2
    Affected: 20.3.3.1.1
    Affected: 20.4.1.2
    Affected: 20.3.3.0.2
    Affected: 20.4.1.1.5
    Affected: 20.4.1.0.01
    Affected: 20.4.1.0.02
    Affected: 20.3.3.1.7
    Affected: 20.3.3.1.5
    Affected: 20.5.1.0.1
    Affected: 20.3.3.1.10
    Affected: 20.3.3.0.8
    Affected: 20.4.2
    Affected: 20.4.2.0.1
    Affected: 20.3.4
    Affected: 20.3.3.0.14
    Affected: 19.2.4.0.8
    Affected: 19.2.4.0.9
    Affected: 20.3.4.0.1
    Affected: 20.3.2.0.5
    Affected: 20.6.1
    Affected: 20.5.1.0.2
    Affected: 20.3.3.0.17
    Affected: 20.6.1.1
    Affected: 20.6.0.18.3
    Affected: 20.3.2.0.6
    Affected: 20.6.0.18.4
    Affected: 20.4.2.0.2
    Affected: 20.3.3.0.16
    Affected: 20.3.4.0.5
    Affected: 20.6.1.0.1
    Affected: 20.3.4.0.6
    Affected: 20.6.2
    Affected: 20.7.1EFT2
    Affected: 20.3.4.0.9
    Affected: 20.3.4.0.11
    Affected: 20.4.2.0.4
    Affected: 20.3.3.0.18
    Affected: 20.7.1
    Affected: 20.6.2.1
    Affected: 20.3.4.1
    Affected: 20.5.1.1
    Affected: 20.4.2.1
    Affected: 20.4.2.1.1
    Affected: 20.3.4.1.1
    Affected: 20.3.813
    Affected: 20.3.4.0.19
    Affected: 20.4.2.2.1
    Affected: 20.5.1.2
    Affected: 20.3.4.2
    Affected: 20.3.814
    Affected: 20.4.2.2
    Affected: 20.6.2.2
    Affected: 20.3.4.2.1
    Affected: 20.7.1.1
    Affected: 20.3.4.1.2
    Affected: 20.6.2.2.2
    Affected: 20.3.4.0.20
    Affected: 20.6.2.2.3
    Affected: 20.4.2.2.2
    Affected: 20.3.5
    Affected: 20.6.2.0.4
    Affected: 20.4.2.2.3
    Affected: 20.3.4.0.24
    Affected: 20.6.2.2.7
    Affected: 20.6.3
    Affected: 20.3.4.2.2
    Affected: 20.4.2.2.4
    Affected: 20.7.1.0.2
    Affected: 20.8.1
    Affected: 20.3.5.0.8
    Affected: 20.3.5.0.9
    Affected: 20.4.2.2.8
    Affected: 20.3.5.0.7
    Affected: 20.6.3.0.7
    Affected: 20.6.3.0.5
    Affected: 20.6.3.0.10
    Affected: 20.6.3.0.2
    Affected: 20.7.2
    Affected: 20.9.1EFT2
    Affected: 20.6.3.0.11
    Affected: 20.6.3.1
    Affected: 20.6.3.0.14
    Affected: 20.6.4
    Affected: 20.9.1
    Affected: 20.6.3.0.19
    Affected: 20.6.3.0.18
    Affected: 20.3.6
    Affected: 20.9.1.1
    Affected: 20.6.3.0.23
    Affected: 20.6.4.0.4
    Affected: 20.6.3.0.25
    Affected: 20.6.5
    Affected: 20.6.3.0.27
    Affected: 20.9.2
    Affected: 20.9.2.1
    Affected: 20.6.3.0.29
    Affected: 20.6.3.0.31
    Affected: 20.6.3.0.32
    Affected: 20.10.1
    Affected: 20.6.3.0.33
    Affected: 20.9.2.0.01
    Affected: 20.9.1_LI_Images
    Affected: 20.10.1_LI_Images
    Affected: 20.9.2_LI_Images
    Affected: 20.3.7
    Affected: 20.9.3
    Affected: 20.6.5.1
    Affected: 20.11.1
    Affected: 20.11.1_LI_Images
    Affected: 20.9.3_LI_ Images
    Affected: 20.6.3.1.1
    Affected: 20.9.3.0.2
    Affected: 20.6.5.1.2
    Affected: 20.9.3.0.3
    Affected: 20.4.2.3
    Affected: 20.6.3.2
    Affected: 20.6.4.1
    Affected: 20.6.3.0.38
    Affected: 20.6.3.0.39
    Affected: 20.3.5.1
    Affected: 20.3.4.3
    Affected: 20.9.3.1
    Affected: 20.3.3.2
    Affected: 20.6.5.2
    Affected: 20.3.7.1
    Affected: 20.10.1.1
    Affected: 20.6.5.2.1
    Affected: 20.3.4.0.25
    Affected: 20.6.2.2.4
    Affected: 20.6.1.2
    Affected: 20.11.1.1
    Affected: 20.9.3.0.5
    Affected: 20.3.4.0.26
    Affected: 20.6.5.1.3
    Affected: 20.6.3.0.40
    Affected: 20.1.3.1
    Affected: 20.9.2.2
    Affected: 20.6.5.2.3
    Affected: 20.6.5.1.4
    Affected: 20.6.5.3
    Affected: 20.6.3.0.41
    Affected: 20.9.3.0.7
    Affected: 20.6.5.1.5
    Affected: 20.9.3.0.4
    Affected: 20.6.4.0.19
    Affected: 20.6.5.1.6
    Affected: 20.9.3.0.8
    Affected: 20.6.3.3
    Affected: 20.3.7.2
    Affected: 20.6.5.4
    Affected: 20.6.5.1.7
    Affected: 20.9.3.0.12
    Affected: 20.6.4.2
    Affected: 20.6.5.5
    Affected: 20.9.3.2
    Affected: 20.11.1.2
    Affected: 20.6.3.4
    Affected: 20.10.1.2
    Affected: 20.6.5.1.9
    Affected: 20.9.3.0.16
    Affected: 20.6.3.0.45
    Affected: 20.6.5.1.10
    Affected: 20.9.3.0.17
    Affected: 20.6.5.2.4
    Affected: 20.6.4.0.21
    Affected: 20.9.3.0.18
    Affected: 20.6.3.0.46
    Affected: 20.6.3.0.47
    Affected: 20.9.2.3
    Affected: 20.9.3.2_LI_Images
    Affected: 20.9.3.0.21
    Affected: 20.9.3.0.20
    Affected: 20.9.4_LI_Images
    Affected: 20.9.4
    Affected: 20.6.5.1.11
    Affected: 20.12.1
    Affected: 20.12.1_LI_Images
    Affected: 20.6.5.1.13
    Affected: 20.9.3.0.23
    Affected: 20.6.5.2.8
    Affected: 20.9.4.1
    Affected: 20.9.4.1_LI_Images
    Affected: 20.9.3.0.25
    Affected: 20.9.3.0.24
    Affected: 20.6.5.1.14
    Affected: 20.3.8
    Affected: 20.6.6
    Affected: 20.9.3.0.26
    Affected: 20.6.3.0.51
    Affected: 20.9.3.0.29
    Affected: 20.12.2
    Affected: 20.12.2_LI_Images
    Affected: 20.6.6.0.1
    Affected: 20.13.1_LI_Images
    Affected: 20.9.4.0.4
    Affected: 20.13.1
    Affected: 20.9.4.1.1
    Affected: 20.9.5
    Affected: 20.9.5_LI_Images
    Affected: 20.12.3_LI_Images
    Affected: 20.12.3
    Affected: 20.9.4.1.3
    Affected: 20.6.7
    Affected: 20.9.5.1
    Affected: 20.9.5.1_LI_Images
    Affected: 20.9.4.1.6
    Affected: 20.14.1
    Affected: 20.14.1_LI_Images
    Affected: 20.9.5.2
    Affected: 20.9.5.2.1
    Affected: 20.9.5.2_LI_Images
    Affected: 20.12.3.1
    Affected: 20.12.4
    Affected: 20.15.1_LI_Images
    Affected: 20.15.1
    Affected: 20.9.5.1.4
    Affected: 20.9.5.2.7
    Affected: 20.9.5.2.13
    Affected: 20.9.6
    Affected: 20.9.6_LI_Images
    Affected: 20.9.5.2.14
    Affected: 20.6.8
    Affected: 20.12.4.0.03
    Affected: 20.16.1
    Affected: 20.16.1_LI_Images
    Affected: 20.12.4_LI_Images
    Affected: 20.9.5.2.16
    Affected: 20.12.4.0.4
    Affected: 20.12.401
    Affected: 20.9.5.3
    Affected: 20.9.5.3_LI_Images
    Affected: 20.12.4.1_LI_Images
    Affected: 20.12.4.1
    Affected: 20.9.5.2.21
    Affected: 20.9.6.0.3
    Affected: 20.12.4.0.6
    Affected: 20.15.2_LI_Images
    Affected: 20.15.2
    Affected: 20.12.4_Monthly_ES5
    Affected: 20.12.5
    Affected: 20.12.5_LI_Images
    Affected: 20.9.7_LI _Images
    Affected: 20.9.7
    Affected: 20.15.3
    Affected: 20.15.3_ LI _Images
    Affected: 20.12.501
    Affected: 20.12.5.1_LI_Images
    Affected: 20.12.5.1
    Affected: 20.12.5.2_LI_Images
    Affected: 20.12.5.2
    Affected: 20.15.3.1
    Affected: 20.15.4_LI_Images
    Affected: 20.15.4
    Affected: 20.9.7.1_LI _Images
    Affected: 20.9.7.1
    Affected: 20.18.1
    Affected: 20.18.1_LI_Images
    Affected: 20.12.6_LI_Images
    Affected: 20.12.6
    Affected: 20.12.5.1.01
    Affected: 26.0.1
    Affected: 20.9.8
    Affected: 20.9.8_LI_Images
    Affected: 20.18.2
    Affected: 20.15.4.1_LI_Images
    Affected: 20.15.4.1
    Affected: 20.18.2_LI_Images
    Affected: 26.1.1
    Affected: 26.1.1_LI_Images
    Affected: 20.18.2.1_LI_Images
    Affected: 20.18.2.1
    Affected: 20.15.4.2_LI_Images
    Affected: 20.15.4.2
    Affected: 20.12.6.1
    Affected: 20.12.6.1_LI_Images
    Affected: 20.12.5.3
    Affected: 20.12.5.3_LI_Images
    Affected: 20.9.8.2_LI_Images
    Affected: 20.9.8.2
    Affected: 20.18.3
    Affected: 20.18.3_LI_Images
    Affected: 20.15.5
    Affected: 20.15.5_LI_Images
    Affected: 20.12.7
    Affected: 20.12.7_LI_Images
    Affected: 20.9.9
    Affected: 20.9.9_LI_Images
    Affected: 20.18.2.2
    Affected: 20.18.2.2_LI_Images
    Affected: 20.12.5.4
    Affected: 20.12.5.4_LI_ Images
    Affected: 20.12.7.1_LI_Images
    Affected: 20.12.6.2_LI_Images
    Affected: 20.12.7.1
    Affected: 20.15.5.1
    Affected: 20.15.4.3
    Affected: 20.15.4.3_LI_Images
    Affected: 20.15.5.1_LI_Images
    Affected: 20.12.6.2
    Affected: 20.15.5.2
    Affected: 20.15.5.2_LI_Images
    Affected: 26.1.1.1_LI_Images
    Affected: 20.15.4.4
    Affected: 20.15.4.4_LI_Images
    Affected: 26.1.1.1
    Affected: 20.9.9.1_LI_Images
    Affected: 20.9.9.1
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20262",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-06-15",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20262"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T03:55:46.594Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20262"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Catalyst SD-WAN Manager",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "20.1.12"
            },
            {
              "status": "affected",
              "version": "19.2.1"
            },
            {
              "status": "affected",
              "version": "18.4.4"
            },
            {
              "status": "affected",
              "version": "18.4.5"
            },
            {
              "status": "affected",
              "version": "20.1.1.1"
            },
            {
              "status": "affected",
              "version": "20.1.1"
            },
            {
              "status": "affected",
              "version": "19.3.0"
            },
            {
              "status": "affected",
              "version": "19.2.2"
            },
            {
              "status": "affected",
              "version": "19.2.099"
            },
            {
              "status": "affected",
              "version": "18.3.6"
            },
            {
              "status": "affected",
              "version": "18.3.7"
            },
            {
              "status": "affected",
              "version": "19.2.0"
            },
            {
              "status": "affected",
              "version": "18.3.8"
            },
            {
              "status": "affected",
              "version": "19.0.0"
            },
            {
              "status": "affected",
              "version": "19.1.0"
            },
            {
              "status": "affected",
              "version": "18.4.302"
            },
            {
              "status": "affected",
              "version": "18.4.303"
            },
            {
              "status": "affected",
              "version": "19.2.097"
            },
            {
              "status": "affected",
              "version": "19.2.098"
            },
            {
              "status": "affected",
              "version": "17.2.10"
            },
            {
              "status": "affected",
              "version": "18.3.6.1"
            },
            {
              "status": "affected",
              "version": "19.0.1a"
            },
            {
              "status": "affected",
              "version": "18.2.0"
            },
            {
              "status": "affected",
              "version": "18.4.3"
            },
            {
              "status": "affected",
              "version": "18.4.1"
            },
            {
              "status": "affected",
              "version": "17.2.8"
            },
            {
              "status": "affected",
              "version": "18.3.3.1"
            },
            {
              "status": "affected",
              "version": "18.4.0"
            },
            {
              "status": "affected",
              "version": "18.3.1"
            },
            {
              "status": "affected",
              "version": "17.2.6"
            },
            {
              "status": "affected",
              "version": "17.2.9"
            },
            {
              "status": "affected",
              "version": "18.3.4"
            },
            {
              "status": "affected",
              "version": "17.2.5"
            },
            {
              "status": "affected",
              "version": "18.3.1.1"
            },
            {
              "status": "affected",
              "version": "18.3.5"
            },
            {
              "status": "affected",
              "version": "18.4.0.1"
            },
            {
              "status": "affected",
              "version": "18.3.3"
            },
            {
              "status": "affected",
              "version": "17.2.7"
            },
            {
              "status": "affected",
              "version": "17.2.4"
            },
            {
              "status": "affected",
              "version": "18.3.0"
            },
            {
              "status": "affected",
              "version": "19.2.3"
            },
            {
              "status": "affected",
              "version": "18.4.501_ES"
            },
            {
              "status": "affected",
              "version": "20.3.1"
            },
            {
              "status": "affected",
              "version": "20.1.2"
            },
            {
              "status": "affected",
              "version": "19.2.929"
            },
            {
              "status": "affected",
              "version": "19.2.31"
            },
            {
              "status": "affected",
              "version": "20.3.2"
            },
            {
              "status": "affected",
              "version": "19.2.32"
            },
            {
              "status": "affected",
              "version": "20.3.2_925"
            },
            {
              "status": "affected",
              "version": "20.3.2.1"
            },
            {
              "status": "affected",
              "version": "20.3.2.1_927"
            },
            {
              "status": "affected",
              "version": "18.4.6"
            },
            {
              "status": "affected",
              "version": "20.1.2_937"
            },
            {
              "status": "affected",
              "version": "20.4.1"
            },
            {
              "status": "affected",
              "version": "20.3.2_928"
            },
            {
              "status": "affected",
              "version": "20.3.2_929"
            },
            {
              "status": "affected",
              "version": "20.4.1.0.1"
            },
            {
              "status": "affected",
              "version": "20.3.2.1_930"
            },
            {
              "status": "affected",
              "version": "19.2.4"
            },
            {
              "status": "affected",
              "version": "20.5.0.1.1"
            },
            {
              "status": "affected",
              "version": "20.4.1.1"
            },
            {
              "status": "affected",
              "version": "20.3.3"
            },
            {
              "status": "affected",
              "version": "19.2.4.0.1"
            },
            {
              "status": "affected",
              "version": "20.3.2_937"
            },
            {
              "status": "affected",
              "version": "20.3.3.1"
            },
            {
              "status": "affected",
              "version": "20.5.1"
            },
            {
              "status": "affected",
              "version": "20.1.3"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.4"
            },
            {
              "status": "affected",
              "version": "20.3.3.1.2"
            },
            {
              "status": "affected",
              "version": "20.3.3.1.1"
            },
            {
              "status": "affected",
              "version": "20.4.1.2"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.2"
            },
            {
              "status": "affected",
              "version": "20.4.1.1.5"
            },
            {
              "status": "affected",
              "version": "20.4.1.0.01"
            },
            {
              "status": "affected",
              "version": "20.4.1.0.02"
            },
            {
              "status": "affected",
              "version": "20.3.3.1.7"
            },
            {
              "status": "affected",
              "version": "20.3.3.1.5"
            },
            {
              "status": "affected",
              "version": "20.5.1.0.1"
            },
            {
              "status": "affected",
              "version": "20.3.3.1.10"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.8"
            },
            {
              "status": "affected",
              "version": "20.4.2"
            },
            {
              "status": "affected",
              "version": "20.4.2.0.1"
            },
            {
              "status": "affected",
              "version": "20.3.4"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.14"
            },
            {
              "status": "affected",
              "version": "19.2.4.0.8"
            },
            {
              "status": "affected",
              "version": "19.2.4.0.9"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.1"
            },
            {
              "status": "affected",
              "version": "20.3.2.0.5"
            },
            {
              "status": "affected",
              "version": "20.6.1"
            },
            {
              "status": "affected",
              "version": "20.5.1.0.2"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.17"
            },
            {
              "status": "affected",
              "version": "20.6.1.1"
            },
            {
              "status": "affected",
              "version": "20.6.0.18.3"
            },
            {
              "status": "affected",
              "version": "20.3.2.0.6"
            },
            {
              "status": "affected",
              "version": "20.6.0.18.4"
            },
            {
              "status": "affected",
              "version": "20.4.2.0.2"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.16"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.5"
            },
            {
              "status": "affected",
              "version": "20.6.1.0.1"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.6"
            },
            {
              "status": "affected",
              "version": "20.6.2"
            },
            {
              "status": "affected",
              "version": "20.7.1EFT2"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.9"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.11"
            },
            {
              "status": "affected",
              "version": "20.4.2.0.4"
            },
            {
              "status": "affected",
              "version": "20.3.3.0.18"
            },
            {
              "status": "affected",
              "version": "20.7.1"
            },
            {
              "status": "affected",
              "version": "20.6.2.1"
            },
            {
              "status": "affected",
              "version": "20.3.4.1"
            },
            {
              "status": "affected",
              "version": "20.5.1.1"
            },
            {
              "status": "affected",
              "version": "20.4.2.1"
            },
            {
              "status": "affected",
              "version": "20.4.2.1.1"
            },
            {
              "status": "affected",
              "version": "20.3.4.1.1"
            },
            {
              "status": "affected",
              "version": "20.3.813"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.19"
            },
            {
              "status": "affected",
              "version": "20.4.2.2.1"
            },
            {
              "status": "affected",
              "version": "20.5.1.2"
            },
            {
              "status": "affected",
              "version": "20.3.4.2"
            },
            {
              "status": "affected",
              "version": "20.3.814"
            },
            {
              "status": "affected",
              "version": "20.4.2.2"
            },
            {
              "status": "affected",
              "version": "20.6.2.2"
            },
            {
              "status": "affected",
              "version": "20.3.4.2.1"
            },
            {
              "status": "affected",
              "version": "20.7.1.1"
            },
            {
              "status": "affected",
              "version": "20.3.4.1.2"
            },
            {
              "status": "affected",
              "version": "20.6.2.2.2"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.20"
            },
            {
              "status": "affected",
              "version": "20.6.2.2.3"
            },
            {
              "status": "affected",
              "version": "20.4.2.2.2"
            },
            {
              "status": "affected",
              "version": "20.3.5"
            },
            {
              "status": "affected",
              "version": "20.6.2.0.4"
            },
            {
              "status": "affected",
              "version": "20.4.2.2.3"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.24"
            },
            {
              "status": "affected",
              "version": "20.6.2.2.7"
            },
            {
              "status": "affected",
              "version": "20.6.3"
            },
            {
              "status": "affected",
              "version": "20.3.4.2.2"
            },
            {
              "status": "affected",
              "version": "20.4.2.2.4"
            },
            {
              "status": "affected",
              "version": "20.7.1.0.2"
            },
            {
              "status": "affected",
              "version": "20.8.1"
            },
            {
              "status": "affected",
              "version": "20.3.5.0.8"
            },
            {
              "status": "affected",
              "version": "20.3.5.0.9"
            },
            {
              "status": "affected",
              "version": "20.4.2.2.8"
            },
            {
              "status": "affected",
              "version": "20.3.5.0.7"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.7"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.5"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.10"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.2"
            },
            {
              "status": "affected",
              "version": "20.7.2"
            },
            {
              "status": "affected",
              "version": "20.9.1EFT2"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.11"
            },
            {
              "status": "affected",
              "version": "20.6.3.1"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.14"
            },
            {
              "status": "affected",
              "version": "20.6.4"
            },
            {
              "status": "affected",
              "version": "20.9.1"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.19"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.18"
            },
            {
              "status": "affected",
              "version": "20.3.6"
            },
            {
              "status": "affected",
              "version": "20.9.1.1"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.23"
            },
            {
              "status": "affected",
              "version": "20.6.4.0.4"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.25"
            },
            {
              "status": "affected",
              "version": "20.6.5"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.27"
            },
            {
              "status": "affected",
              "version": "20.9.2"
            },
            {
              "status": "affected",
              "version": "20.9.2.1"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.29"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.31"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.32"
            },
            {
              "status": "affected",
              "version": "20.10.1"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.33"
            },
            {
              "status": "affected",
              "version": "20.9.2.0.01"
            },
            {
              "status": "affected",
              "version": "20.9.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.10.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.3.7"
            },
            {
              "status": "affected",
              "version": "20.9.3"
            },
            {
              "status": "affected",
              "version": "20.6.5.1"
            },
            {
              "status": "affected",
              "version": "20.11.1"
            },
            {
              "status": "affected",
              "version": "20.11.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.3_LI_ Images"
            },
            {
              "status": "affected",
              "version": "20.6.3.1.1"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.2"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.2"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.3"
            },
            {
              "status": "affected",
              "version": "20.4.2.3"
            },
            {
              "status": "affected",
              "version": "20.6.3.2"
            },
            {
              "status": "affected",
              "version": "20.6.4.1"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.38"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.39"
            },
            {
              "status": "affected",
              "version": "20.3.5.1"
            },
            {
              "status": "affected",
              "version": "20.3.4.3"
            },
            {
              "status": "affected",
              "version": "20.9.3.1"
            },
            {
              "status": "affected",
              "version": "20.3.3.2"
            },
            {
              "status": "affected",
              "version": "20.6.5.2"
            },
            {
              "status": "affected",
              "version": "20.3.7.1"
            },
            {
              "status": "affected",
              "version": "20.10.1.1"
            },
            {
              "status": "affected",
              "version": "20.6.5.2.1"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.25"
            },
            {
              "status": "affected",
              "version": "20.6.2.2.4"
            },
            {
              "status": "affected",
              "version": "20.6.1.2"
            },
            {
              "status": "affected",
              "version": "20.11.1.1"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.5"
            },
            {
              "status": "affected",
              "version": "20.3.4.0.26"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.3"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.40"
            },
            {
              "status": "affected",
              "version": "20.1.3.1"
            },
            {
              "status": "affected",
              "version": "20.9.2.2"
            },
            {
              "status": "affected",
              "version": "20.6.5.2.3"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.4"
            },
            {
              "status": "affected",
              "version": "20.6.5.3"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.41"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.7"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.5"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.4"
            },
            {
              "status": "affected",
              "version": "20.6.4.0.19"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.6"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.8"
            },
            {
              "status": "affected",
              "version": "20.6.3.3"
            },
            {
              "status": "affected",
              "version": "20.3.7.2"
            },
            {
              "status": "affected",
              "version": "20.6.5.4"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.7"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.12"
            },
            {
              "status": "affected",
              "version": "20.6.4.2"
            },
            {
              "status": "affected",
              "version": "20.6.5.5"
            },
            {
              "status": "affected",
              "version": "20.9.3.2"
            },
            {
              "status": "affected",
              "version": "20.11.1.2"
            },
            {
              "status": "affected",
              "version": "20.6.3.4"
            },
            {
              "status": "affected",
              "version": "20.10.1.2"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.9"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.16"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.45"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.10"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.17"
            },
            {
              "status": "affected",
              "version": "20.6.5.2.4"
            },
            {
              "status": "affected",
              "version": "20.6.4.0.21"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.18"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.46"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.47"
            },
            {
              "status": "affected",
              "version": "20.9.2.3"
            },
            {
              "status": "affected",
              "version": "20.9.3.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.21"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.20"
            },
            {
              "status": "affected",
              "version": "20.9.4_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.4"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.11"
            },
            {
              "status": "affected",
              "version": "20.12.1"
            },
            {
              "status": "affected",
              "version": "20.12.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.13"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.23"
            },
            {
              "status": "affected",
              "version": "20.6.5.2.8"
            },
            {
              "status": "affected",
              "version": "20.9.4.1"
            },
            {
              "status": "affected",
              "version": "20.9.4.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.25"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.24"
            },
            {
              "status": "affected",
              "version": "20.6.5.1.14"
            },
            {
              "status": "affected",
              "version": "20.3.8"
            },
            {
              "status": "affected",
              "version": "20.6.6"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.26"
            },
            {
              "status": "affected",
              "version": "20.6.3.0.51"
            },
            {
              "status": "affected",
              "version": "20.9.3.0.29"
            },
            {
              "status": "affected",
              "version": "20.12.2"
            },
            {
              "status": "affected",
              "version": "20.12.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.6.6.0.1"
            },
            {
              "status": "affected",
              "version": "20.13.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.4.0.4"
            },
            {
              "status": "affected",
              "version": "20.13.1"
            },
            {
              "status": "affected",
              "version": "20.9.4.1.1"
            },
            {
              "status": "affected",
              "version": "20.9.5"
            },
            {
              "status": "affected",
              "version": "20.9.5_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.3_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.3"
            },
            {
              "status": "affected",
              "version": "20.9.4.1.3"
            },
            {
              "status": "affected",
              "version": "20.6.7"
            },
            {
              "status": "affected",
              "version": "20.9.5.1"
            },
            {
              "status": "affected",
              "version": "20.9.5.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.4.1.6"
            },
            {
              "status": "affected",
              "version": "20.14.1"
            },
            {
              "status": "affected",
              "version": "20.14.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.5.2"
            },
            {
              "status": "affected",
              "version": "20.9.5.2.1"
            },
            {
              "status": "affected",
              "version": "20.9.5.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.3.1"
            },
            {
              "status": "affected",
              "version": "20.12.4"
            },
            {
              "status": "affected",
              "version": "20.15.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.1"
            },
            {
              "status": "affected",
              "version": "20.9.5.1.4"
            },
            {
              "status": "affected",
              "version": "20.9.5.2.7"
            },
            {
              "status": "affected",
              "version": "20.9.5.2.13"
            },
            {
              "status": "affected",
              "version": "20.9.6"
            },
            {
              "status": "affected",
              "version": "20.9.6_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.5.2.14"
            },
            {
              "status": "affected",
              "version": "20.6.8"
            },
            {
              "status": "affected",
              "version": "20.12.4.0.03"
            },
            {
              "status": "affected",
              "version": "20.16.1"
            },
            {
              "status": "affected",
              "version": "20.16.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.4_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.5.2.16"
            },
            {
              "status": "affected",
              "version": "20.12.4.0.4"
            },
            {
              "status": "affected",
              "version": "20.12.401"
            },
            {
              "status": "affected",
              "version": "20.9.5.3"
            },
            {
              "status": "affected",
              "version": "20.9.5.3_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.4.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.4.1"
            },
            {
              "status": "affected",
              "version": "20.9.5.2.21"
            },
            {
              "status": "affected",
              "version": "20.9.6.0.3"
            },
            {
              "status": "affected",
              "version": "20.12.4.0.6"
            },
            {
              "status": "affected",
              "version": "20.15.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.2"
            },
            {
              "status": "affected",
              "version": "20.12.4_Monthly_ES5"
            },
            {
              "status": "affected",
              "version": "20.12.5"
            },
            {
              "status": "affected",
              "version": "20.12.5_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.7_LI _Images"
            },
            {
              "status": "affected",
              "version": "20.9.7"
            },
            {
              "status": "affected",
              "version": "20.15.3"
            },
            {
              "status": "affected",
              "version": "20.15.3_ LI _Images"
            },
            {
              "status": "affected",
              "version": "20.12.501"
            },
            {
              "status": "affected",
              "version": "20.12.5.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.5.1"
            },
            {
              "status": "affected",
              "version": "20.12.5.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.5.2"
            },
            {
              "status": "affected",
              "version": "20.15.3.1"
            },
            {
              "status": "affected",
              "version": "20.15.4_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.4"
            },
            {
              "status": "affected",
              "version": "20.9.7.1_LI _Images"
            },
            {
              "status": "affected",
              "version": "20.9.7.1"
            },
            {
              "status": "affected",
              "version": "20.18.1"
            },
            {
              "status": "affected",
              "version": "20.18.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.6_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.6"
            },
            {
              "status": "affected",
              "version": "20.12.5.1.01"
            },
            {
              "status": "affected",
              "version": "26.0.1"
            },
            {
              "status": "affected",
              "version": "20.9.8"
            },
            {
              "status": "affected",
              "version": "20.9.8_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.18.2"
            },
            {
              "status": "affected",
              "version": "20.15.4.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.4.1"
            },
            {
              "status": "affected",
              "version": "20.18.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "26.1.1"
            },
            {
              "status": "affected",
              "version": "26.1.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.18.2.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.18.2.1"
            },
            {
              "status": "affected",
              "version": "20.15.4.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.4.2"
            },
            {
              "status": "affected",
              "version": "20.12.6.1"
            },
            {
              "status": "affected",
              "version": "20.12.6.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.5.3"
            },
            {
              "status": "affected",
              "version": "20.12.5.3_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.8.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.8.2"
            },
            {
              "status": "affected",
              "version": "20.18.3"
            },
            {
              "status": "affected",
              "version": "20.18.3_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.5"
            },
            {
              "status": "affected",
              "version": "20.15.5_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.7"
            },
            {
              "status": "affected",
              "version": "20.12.7_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.9"
            },
            {
              "status": "affected",
              "version": "20.9.9_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.18.2.2"
            },
            {
              "status": "affected",
              "version": "20.18.2.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.5.4"
            },
            {
              "status": "affected",
              "version": "20.12.5.4_LI_ Images"
            },
            {
              "status": "affected",
              "version": "20.12.7.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.6.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.7.1"
            },
            {
              "status": "affected",
              "version": "20.15.5.1"
            },
            {
              "status": "affected",
              "version": "20.15.4.3"
            },
            {
              "status": "affected",
              "version": "20.15.4.3_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.5.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.12.6.2"
            },
            {
              "status": "affected",
              "version": "20.15.5.2"
            },
            {
              "status": "affected",
              "version": "20.15.5.2_LI_Images"
            },
            {
              "status": "affected",
              "version": "26.1.1.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.15.4.4"
            },
            {
              "status": "affected",
              "version": "20.15.4.4_LI_Images"
            },
            {
              "status": "affected",
              "version": "26.1.1.1"
            },
            {
              "status": "affected",
              "version": "20.9.9.1_LI_Images"
            },
            {
              "status": "affected",
              "version": "20.9.9.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.\r\n\r\nThis vulnerability exists because the affected software does not properly validate user-supplied input during a file upload process. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected API endpoint of the affected system. A successful exploit could allow the attacker to create or overwrite any file on the underlying operating system. This file could later be used to elevate to root. To exploit this vulnerability, the attacker must have valid credentials with at least a lower-privileged, single-task user account."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "In June 2026, the Cisco PSIRT became aware of limited exploitation of this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-15T16:21:09.696Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-sdwan-arbfw-c2rZvQ",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ"
        }
      ],
      "source": {
        "advisory": "cisco-sa-sdwan-arbfw-c2rZvQ",
        "defects": [
          "CSCwu18441"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20262",
    "datePublished": "2026-06-15T16:21:09.696Z",
    "dateReserved": "2025-10-08T11:59:15.402Z",
    "dateUpdated": "2026-06-17T03:55:46.594Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}