SecurityWeekIonut Arghire
Cisco flags ClamAV bugs in Secure Endpoint Connector, risking DoS
Part of the CVE-2026-20337 story · since 10 Aug
- Mon 10 Aug, 14:41 UTC. SecurityWeek, first report. Cisco flags ClamAV bugs in Secure Endpoint Connector, risking DoS. This article, 1st of 2.
- Tue 11 Aug, 16:32 UTC. Security Affairs, its first report on the story. Cisco Warns of Critical ClamAV Flaws Affecting Secure Endpoint.
Cisco has issued a warning regarding vulnerabilities in its Secure Endpoint Connector products for Windows, macOS, and Linux, stemming from seven ClamAV vulnerabilities. These vulnerabilities, identified as CVE-2026-20337 to CVE-2026-20339 and CVE-2026-20345 to CVE-2026-20348, could lead to denial-of-service (DoS) conditions, with two having public proof-of-concept (PoC) code available. Although patches are included in ClamAV version 1.5.4, no workarounds exist.
The risks are highest for Windows users due to the privileged context in which ClamAV operates, while the risk is moderate for macOS and Linux due to lower privilege levels. Users of Secure Endpoint Private Cloud are unaffected and are advised to push available patches from cloud releases 4.2.8 and later to their endpoints.
How the story developed
2 articles from 2 outlets since 10 Aug. Quiet since 11 Aug. This was the first report.
- Mon 10 Aug, 14:41 UTC. SecurityWeek, first report. Cisco flags ClamAV bugs in Secure Endpoint Connector, risking DoS. This article, 1st of 2.
- Tue 11 Aug, 16:32 UTC. Security Affairs, its first report on the story. Cisco Warns of Critical ClamAV Flaws Affecting Secure Endpoint.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 2 articles as a listHide the list
- Mon 10 AugDay 01
- Cisco flags ClamAV bugs in Secure Endpoint Connector, risking DoS14:41 · SecurityWeek · First report · This article, 1st of 2
- Tue 11 AugDay 11
- Cisco Warns of Critical ClamAV Flaws Affecting Secure Endpoint16:32 · Security Affairs