VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

CVE-2026-20215: ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability

2 karet z 3 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-20215

EPSS 0.01 EPSS k 18. 10. 2026

Hodnocení závažnosti

7.5 CVSS 3.1 cisco

útok odkudkoli z internetu bez přípravy bez přihlášení bez zásahu uživatele
dopad bez úniku dat beze změny dat úplný výpadek
přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

cve.org · NVD

SPOJENO PŘES CVE ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Clam AntiVirus. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 8.4. The following CVEs are assigned: CVE-2026-20215.

EPSS 0.01 CVSS 8.4 CVE-2026-20215 Clam AntiVirus ClamAV US

· Zero Day Initiative · ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability · Microsoft Security · CVE-2026-20215 ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability

ClamAV Vulnerabilities Affecting Cisco Products: July 2026

Multiple vulnerabilities in ClamAV could allow a remote attacker to cause a denial of service (DoS) condition, interrupting scanning operations. For more information about these vulnerabilities, see the Details section of this advisory. For additional information on these vulnerabilities in ClamAV, see the ClamAV blog. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. Notes: The Security Impact Rating (SIR) for…

EPSS 0.01 CVE-2026-20213 CVE-2026-20214 CVE-2026-20215 CVE-2026-20216 CVE-2026-20217 CVE-2026-20243 CVE-2026-20244 Cisco US

· Cisco PSIRT · ClamAV Vulnerabilities Affecting Cisco Products: July 2026