https://vulnerability.circl.lu/sightings/feed 2026-08-13T17:44:28.145475+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1d3d7135-0872-459a-8376-c129accfc073/export 2026-08-13T17:44:28.173291+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "1d3d7135-0872-459a-8376-c129accfc073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2005", "content": "", "creation_timestamp": "2026-08-13T08:46:59.317060Z"} 2026-08-13T08:46:59.317060+00:00 https://vulnerability.circl.lu/sighting/22d09ac7-bf6e-4078-ba1b-8a822881da1e/export 2026-08-13T17:44:28.175232+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "22d09ac7-bf6e-4078-ba1b-8a822881da1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0992", "content": "", "creation_timestamp": "2026-08-13T08:45:38.833889Z"} 2026-08-13T08:45:38.833889+00:00 https://vulnerability.circl.lu/sighting/f742204c-101e-427c-bcbf-ab11f5f03daa/export 2026-08-13T17:44:28.175345+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f742204c-101e-427c-bcbf-ab11f5f03daa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://t.me/true_secator/8496", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-08-13T01:00:04.053662Z"} 2026-08-13T01:00:04.053662+00:00 https://vulnerability.circl.lu/sighting/f872797c-aa51-428c-82a2-576f4de1fd74/export 2026-08-13T17:44:28.176240+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f872797c-aa51-428c-82a2-576f4de1fd74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20337", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3msuofib4cw26", "content": "\ud83d\udcf0 Cisco Peringatkan Dua Kerentanan ClamAV dengan Exploit yang Sudah Tersedia untuk Publik\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/12/kerentanan-clamav-cve-2026-20337-cve-2026-20338/\n\n#antivirus #cisco #clamav #cybersecurity #denialOfService #dos #exploit #keamananSiber #", "creation_timestamp": "2026-08-12T08:08:17.363695Z"} 2026-08-12T08:08:17.363695+00:00 https://vulnerability.circl.lu/sighting/f7236d70-06b5-47ea-bba3-ae5d87a0f4b1/export 2026-08-13T17:44:28.176326+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "f7236d70-06b5-47ea-bba3-ae5d87a0f4b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:10.241688Z"} 2026-08-12T04:45:10.241688+00:00 https://vulnerability.circl.lu/sighting/3f07c99a-d5d7-4132-ba9c-4b93467bcf3f/export 2026-08-13T17:44:28.176399+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3f07c99a-d5d7-4132-ba9c-4b93467bcf3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20337", "type": "seen", "source": "https://bsky.app/profile/methiaff.bsky.social/post/3mssroex7ku2d", "content": "clamav zip parser flaws. so cve-2026-20337 and cve-2026-20338 are dos vectors.", "creation_timestamp": "2026-08-11T14:01:36.678049Z"} 2026-08-11T14:01:36.678049+00:00 https://vulnerability.circl.lu/sighting/eed23d91-ec7e-45c0-8a55-0218461f3614/export 2026-08-13T17:44:28.176470+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "eed23d91-ec7e-45c0-8a55-0218461f3614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mssrla3bc22q", "content": "The security flaws (tracked as CVE-2026-20337 and CVE-2026-20338) were found in the ZIP archive parser of ClamAV (Clam AntiVirus), the open-source and cross-platform engine used to scan files for malware. www.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-08-11T13:59:51.939555Z"} 2026-08-11T13:59:51.939555+00:00 https://vulnerability.circl.lu/sighting/01ecc0da-6b5f-482f-953b-bb5e2f07fcf4/export 2026-08-13T17:44:28.176538+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "01ecc0da-6b5f-482f-953b-bb5e2f07fcf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117077231235982411", "content": "The security flaws (tracked as CVE-2026-20337 and CVE-2026-20338) were found in the ZIP archive parser of ClamAV (Clam AntiVirus), the open-source and cross-platform engine used to scan files for malware. https://www.bleepingcomputer.com/news/security/cisco-warns-of-high-severity-clamav-flaws-with-public-exploits/", "creation_timestamp": "2026-08-11T13:59:35.855311Z"} 2026-08-11T13:59:35.855311+00:00 https://vulnerability.circl.lu/sighting/7ee02ab5-b13b-4b06-8722-04f07839bce7/export 2026-08-13T17:44:28.176612+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7ee02ab5-b13b-4b06-8722-04f07839bce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mssmoymlhs2u", "content": "Cisco alerta para duas falhas graves no ClamAV que amea\u00e7am sistemas Windows, permitindo ataques remotos de nega\u00e7\u00e3o de servi\u00e7o (DoS) sem autentica\u00e7\u00e3o pr\u00e9via. As vulnerabilidades, CVE-2026-20337 e CVE-2026-20338, afetam o analisador de ficheiros ZIP do sistema de c\u00f3digo aberto. \ud83d\udea8\n\n#alerta #graves #win", "creation_timestamp": "2026-08-11T12:32:29.139653Z"} 2026-08-11T12:32:29.139653+00:00 https://vulnerability.circl.lu/sighting/015972a5-4685-48fc-b25a-f8f8abd22073/export 2026-08-13T17:44:28.176681+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "015972a5-4685-48fc-b25a-f8f8abd22073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2", "content": "Aggiornamenti di sicurezza Cisco sanano 7 vulnerabilit\u00e0 con gravit\u00e0 \"alta\" presenti in ClamAV, software open source per l'analisi antivirus. Tra queste si evidenziano le CVE-2026-20337 e CVE-2026-20338 per le quali il vendor conferma la presenza di Proof of Concept (PoC) disponibili in rete.", "creation_timestamp": "2026-08-11T01:00:35.987173Z"} 2026-08-11T01:00:35.987173+00:00