# CVE-2026-20338 ## Summary - **CVE ID:** CVE-2026-20338 - **Severity:** HIGH - **CVSS Score:** 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) - **CWE:** CWE-415 - **Published:** Aug 7, 2026 - **Last Modified:** Aug 7, 2026 ## Description A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper memory handling when processing content in zip files during scanning. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate as a result of a memory double-free, resulting in a DoS condition on the affected software. ## Affected Products - Cisco — Cisco Secure Endpoint (7.0.5) - Cisco — Cisco Secure Endpoint (6.2.19) - Cisco — Cisco Secure Endpoint (7.3.3) - Cisco — Cisco Secure Endpoint (7.2.13) - Cisco — Cisco Secure Endpoint (6.1.5) - Cisco — Cisco Secure Endpoint (6.3.1) - Cisco — Cisco Secure Endpoint (6.2.5) - Cisco — Cisco Secure Endpoint (7.3.5) - Cisco — Cisco Secure Endpoint (6.2.1) - Cisco — Cisco Secure Endpoint (7.2.7) - Cisco — Cisco Secure Endpoint (7.1.1) - Cisco — Cisco Secure Endpoint (6.3.5) - Cisco — Cisco Secure Endpoint (6.2.9) - Cisco — Cisco Secure Endpoint (7.3.1) - Cisco — Cisco Secure Endpoint (6.1.7) - Cisco — Cisco Secure Endpoint (7.2.11) - Cisco — Cisco Secure Endpoint (7.2.3) - Cisco — Cisco Secure Endpoint (7.1.5) - Cisco — Cisco Secure Endpoint (6.3.3) - Cisco — Cisco Secure Endpoint (7.3.9) - Cisco — Cisco Secure Endpoint (6.2.3) - Cisco — Cisco Secure Endpoint (6.1.9) - Cisco — Cisco Secure Endpoint (6.0.9) - Cisco — Cisco Secure Endpoint (7.2.5) - Cisco — Cisco Secure Endpoint (6.0.7) - Cisco — Cisco Secure Endpoint (6.3.7) - Cisco — Cisco Secure Endpoint (1.12.3) - Cisco — Cisco Secure Endpoint (1.8.0) - Cisco — Cisco Secure Endpoint (1.11.1) - Cisco — Cisco Secure Endpoint (1.12.4) - Cisco — Cisco Secure Endpoint (1.10.0) - Cisco — Cisco Secure Endpoint (1.12.0) - Cisco — Cisco Secure Endpoint (1.8.1) - Cisco — Cisco Secure Endpoint (1.10.1) - Cisco — Cisco Secure Endpoint (1.12.1) - Cisco — Cisco Secure Endpoint (1.12.6) - Cisco — Cisco Secure Endpoint (1.14.0) - Cisco — Cisco Secure Endpoint (1.10.2) - Cisco — Cisco Secure Endpoint (1.12.7) - Cisco — Cisco Secure Endpoint (1.12.2) - Cisco — Cisco Secure Endpoint (1.6.0) - Cisco — Cisco Secure Endpoint (1.9.0) - Cisco — Cisco Secure Endpoint (1.11.0) - Cisco — Cisco Secure Endpoint (1.7.0) - Cisco — Cisco Secure Endpoint (1.13.0) - Cisco — Cisco Secure Endpoint (1.8.4) - Cisco — Cisco Secure Endpoint (1.13.1) - Cisco — Cisco Secure Endpoint (1.9.1) - Cisco — Cisco Secure Endpoint (1.12.5) - Cisco — Cisco Secure Endpoint (1.13.2) - Cisco — Cisco Secure Endpoint (8.1.7.21512) - Cisco — Cisco Secure Endpoint (8.1.7) - Cisco — Cisco Secure Endpoint (8.1.5) - Cisco — Cisco Secure Endpoint (8.1.3.21242) - Cisco — Cisco Secure Endpoint (8.1.3) - Cisco — Cisco Secure Endpoint (8.1.5.21322) - Cisco — Cisco Secure Endpoint (8.1.7.21417) - Cisco — Cisco Secure Endpoint (1.14.1) - Cisco — Cisco Secure Endpoint (1.15.1) - Cisco — Cisco Secure Endpoint (1.15.2) - Cisco — Cisco Secure Endpoint (1.15.3) - Cisco — Cisco Secure Endpoint (1.15.4) - Cisco — Cisco Secure Endpoint (1.15.5) - Cisco — Cisco Secure Endpoint (1.15.6) - Cisco — Cisco Secure Endpoint (1.16.0) - Cisco — Cisco Secure Endpoint (1.16.1) - Cisco — Cisco Secure Endpoint (1.16.2) - Cisco — Cisco Secure Endpoint (1.16.3) - Cisco — Cisco Secure Endpoint (1.18.0) - Cisco — Cisco Secure Endpoint (1.18.1) - Cisco — Cisco Secure Endpoint (1.20.0) - Cisco — Cisco Secure Endpoint (1.21.0) - Cisco — Cisco Secure Endpoint (1.21.1) - Cisco — Cisco Secure Endpoint (1.21.2) - Cisco — Cisco Secure Endpoint (1.21.3) - Cisco — Cisco Secure Endpoint (1.22.0) - Cisco — Cisco Secure Endpoint (1.22.1) - Cisco — Cisco Secure Endpoint (1.22.2) - Cisco — Cisco Secure Endpoint (1.22.3) - Cisco — Cisco Secure Endpoint (1.22.4) - Cisco — Cisco Secure Endpoint (1.24.0) - Cisco — Cisco Secure Endpoint (1.24.1) - Cisco — Cisco Secure Endpoint (1.24.2) - Cisco — Cisco Secure Endpoint (1.24.3) - Cisco — Cisco Secure Endpoint (1.24.4) - Cisco — Cisco Secure Endpoint (1.26.0) - Cisco — Cisco Secure Endpoint (1.24.5) - Cisco — Cisco Secure Endpoint (1.26.1) - Cisco — Cisco Secure Endpoint (1.27.0) - Cisco — Cisco Secure Endpoint (1.15.0) - Cisco — Cisco Secure Endpoint (1.17.0) - Cisco — Cisco Secure Endpoint (1.17.1) - Cisco — Cisco Secure Endpoint (1.17.2) - Cisco — Cisco Secure Endpoint (1.19.0) - Cisco — Cisco Secure Endpoint (1.20.1) - Cisco — Cisco Secure Endpoint (1.20.2) - Cisco — Cisco Secure Endpoint (1.20.3) - Cisco — Cisco Secure Endpoint (1.20.4) - Cisco — Cisco Secure Endpoint (1.20.5) - Cisco — Cisco Secure Endpoint (1.20.6) - Cisco — Cisco Secure Endpoint (1.23.0) - Cisco — Cisco Secure Endpoint (1.23.1) - Cisco — Cisco Secure Endpoint (1.20.7) - Cisco — Cisco Secure Endpoint (1.20.8) - Cisco — Cisco Secure Endpoint (1.25.0) - Cisco — Cisco Secure Endpoint (1.25.1) - Cisco — Cisco Secure Endpoint (1.25.2) - Cisco — Cisco Secure Endpoint (1.27.1) - Cisco — Cisco Secure Endpoint (1.27.2) - Cisco — Cisco Secure Endpoint (7.3.13) - Cisco — Cisco Secure Endpoint (7.3.15) - Cisco — Cisco Secure Endpoint (7.4.1) - Cisco — Cisco Secure Endpoint (7.4.1.20425) - Cisco — Cisco Secure Endpoint (7.4.1.20439) - Cisco — Cisco Secure Endpoint (7.4.3) - Cisco — Cisco Secure Endpoint (7.4.3.20679) - Cisco — Cisco Secure Endpoint (7.4.5) - Cisco — Cisco Secure Endpoint (7.5.1.20813) - Cisco — Cisco Secure Endpoint (7.5.1.20833) - Cisco — Cisco Secure Endpoint (7.5.3) - Cisco — Cisco Secure Endpoint (7.5.5) - Cisco — Cisco Secure Endpoint (8.0.1.21160) - Cisco — Cisco Secure Endpoint (8.0.1.21164) - Cisco — Cisco Secure Endpoint (7.5.7) - Cisco — Cisco Secure Endpoint (7.5.9) - Cisco — Cisco Secure Endpoint (7.5.11) - Cisco — Cisco Secure Endpoint (8.1.7.21585) - Cisco — Cisco Secure Endpoint (7.5.13.21586) - Cisco — Cisco Secure Endpoint (7.5.13.21598) - Cisco — Cisco Secure Endpoint (8.2.1.21612) - Cisco — Cisco Secure Endpoint (8.2.1.21650) - Cisco — Cisco Secure Endpoint (7.5.15.21611) - Cisco — Cisco Secure Endpoint (7.5.17.21680) - Cisco — Cisco Secure Endpoint (8.2.3.30119) - Cisco — Cisco Secure Endpoint (8.2.4.30130) - Cisco — Cisco Secure Endpoint (8.4.0) - Cisco — Cisco Secure Endpoint (7.5.19) - Cisco — Cisco Secure Endpoint (8.4.1.30298) - Cisco — Cisco Secure Endpoint (8.4.2.30317) - Cisco — Cisco Secure Endpoint (8.4.1.30307) - Cisco — Cisco Secure Endpoint (7.5.20) - Cisco — Cisco Secure Endpoint (8.4.3) - Cisco — Cisco Secure Endpoint (8.4.4.30419) - Cisco — Cisco Secure Endpoint (8.4.4.30467) - Cisco — Cisco Secure Endpoint (7.5.21.21732) - Cisco — Cisco Secure Endpoint (8.4.5.30483) ## References - [CNA](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26) ## Exploitation Prediction (EPSS) - **EPSS Score:** 0.47% - **EPSS Percentile:** 39.2 --- _Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._