{"metadata": {"vulnerability": "CVE-2026-20337", "count": 84, "kinds": {"milestone": 14, "sighting": 17, "kev": 0, "other": 53}}, "data": [{"timestamp": "2025-10-08T11:59:15.413Z", "date_only": false, "value": "2025-10-08T11:59:15.413Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-20337", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-07T00:00:00Z", "date_only": true, "value": "2026-08-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0992", "record": "CERTFR-2026-AVI-0992", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-07T15:55:38Z", "date_only": false, "value": "2026-08-07T15:55:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-CLAMAV-WUUVVD26", "record": "CISCO-SA-CLAMAV-WUUVVD26", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-07T16:00:00Z", "date_only": false, "value": "2026-08-07T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-CLAMAV-WUUVVD26", "record": "CISCO-SA-CLAMAV-WUUVVD26", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-07T16:41:51.036Z", "date_only": false, "value": "2026-08-07T16:41:51.036Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-20337", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-07T16:41:51.036Z", "date_only": false, "value": "2026-08-07T16:41:51.036Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2026-20337", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-07T17:17:00Z", "date_only": false, "value": "2026-08-07T17:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-20337", "record": "UBUNTU-CVE-2026-20337", "field": "published"}, {"timestamp": "2026-08-07T17:17:02Z", "date_only": false, "value": "2026-08-07T17:17:02Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RHG3-HWFW-HP7P", "record": "GHSA-RHG3-HWFW-HP7P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-07T17:17:02.413Z", "date_only": false, "value": "2026-08-07T17:17:02.413", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20337", "record": "FKIE_CVE-2026-20337", "field": "published"}, {"timestamp": "2026-08-07T17:50:55.079Z", "date_only": false, "value": "2026-08-07T17:50:55.079589Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117055491493877536", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "b2087eb2-ec30-4fc1-b6f1-b350c4895aa0", "content": "CISA has added one vulnerability to the KEV catalogue:\nCVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA \nCisco:\nNEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco \nPalo Alto:\nCRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288 \nMicrosoft:\nSeveral updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft \nGoogle:\nNew: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome \nBroadcom:\nOne new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory\nPosted yesterday:\nApple security updates https://support.apple.com/en-us/100100 #Apple \nAMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD \nDell:\nCRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL", "url": "https://infosec.exchange/users/AAKL/statuses/117055491493877536"}, {"timestamp": "2026-08-07T18:11:33.953Z", "date_only": false, "value": "2026-08-07T18:11:33.953042Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20337", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-07T18:11:33.953Z", "date_only": false, "value": "2026-08-07T18:11:33.953042Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20337", "record": "FKIE_CVE-2026-20337", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-07T18:11:57.408Z", "date_only": false, "value": "2026-08-07T18:11:57.408Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-20337", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-07T18:11:57.408Z", "date_only": false, "value": "2026-08-07T18:11:57.408Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20337", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-07T18:31:44Z", "date_only": false, "value": "2026-08-07T18:31:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RHG3-HWFW-HP7P", "record": "GHSA-RHG3-HWFW-HP7P", "field": "published"}, {"timestamp": "2026-08-07T18:31:44Z", "date_only": false, "value": "2026-08-07T18:31:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RHG3-HWFW-HP7P", "record": "GHSA-RHG3-HWFW-HP7P", "field": "modified"}, {"timestamp": "2026-08-08T14:02:58.435Z", "date_only": false, "value": "2026-08-08T14:02:58.435807Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mslae2k27x2n", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "11c606f8-f920-46d3-9695-02c329752f31", "content": "CVE-2026-20337 - Memory corruption in ClamAV ZIP parsing, out-of-bounds write DoS. CVSS 7.5. Unpatched. Update or mitigate immediately. #CVE #Cisco #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-20337/", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mslae2k27x2n"}, {"timestamp": "2026-08-08T14:03:05.056Z", "date_only": false, "value": "2026-08-08T14:03:05.056307Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117060257580268133", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "1540fae6-7014-4cbd-803f-8bb8dd7ace33", "content": "CVE-2026-20337 - Memory corruption in ClamAV ZIP parsing, out-of-bounds write DoS. CVSS 7.5. Unpatched. Update or mitigate immediately. #CVE #Cisco #infosec\nhttps://www.valtersit.com/cve/CVE-2026-20337/", "url": "https://mastodon.social/users/hugovalters/statuses/117060257580268133"}, {"timestamp": "2026-08-10T00:00:00Z", "date_only": false, "value": "2026-08-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0992", "record": "CERTFR-2026-AVI-0992", "field": "last_revision_date"}, {"timestamp": "2026-08-10T00:00:00Z", "date_only": false, "value": "2026-08-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0992", "record": "CERTFR-2026-AVI-0992", "field": "initial_release_date"}, {"timestamp": "2026-08-10T00:00:00Z", "date_only": false, "value": "2026-08-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0992", "record": "CERTFR-2026-AVI-0992", "field": "revisions.0.revision_date"}, {"timestamp": "2026-08-10T10:00:46.642Z", "date_only": false, "value": "2026-08-10T10:00:46.642771Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "29ea67f0-5979-43b5-9b02-50169f7b5e58", "content": "Aggiornamenti di sicurezza Cisco sanano 7 vulnerabilit\u00e0 con gravit\u00e0 \"alta\" presenti in ClamAV, software open source per l'analisi antivirus. Tra queste si evidenziano le CVE-2026-20337 e CVE-2026-20338 per le quali il vendor conferma la presenza di Proof of Concept (PoC) disponibili in rete.", "url": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2"}, {"timestamp": "2026-08-10T13:20:06.827Z", "date_only": false, "value": "2026-08-10T13:20:06.827478Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vaybd72j", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "77e8ad64-4da4-47f7-8d18-ee725b889538", "content": "\ud83d\udd17 CVE : CVE-2025-8088, CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vaybd72j"}, {"timestamp": "2026-08-10T16:03:09Z", "date_only": false, "value": "2026-08-10T16:03:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-CLAMAV-WUUVVD26", "record": "CISCO-SA-CLAMAV-WUUVVD26", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-08-10T16:26:03.892Z", "date_only": false, "value": "2026-08-10T16:26:03.892272Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117072144817424275", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "e6cca892-8fe5-449a-bf1b-a4589f65fc9f", "content": "New.\nCISA: Gunra Ransomware Advisory https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-222a \nCisco:\nAdvisory for a high-severity vulnerability first published on August 7:\nCVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 @TalosSecurity #Cisco #infosec #CISA #ransomware #cybercrime #vulnerability", "url": "https://infosec.exchange/users/AAKL/statuses/117072144817424275"}, {"timestamp": "2026-08-11T01:17:52Z", "date_only": false, "value": "2026-08-11T01:17:52.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-20337", "record": "MSRC_CVE-2026-20337", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-11T01:17:52Z", "date_only": false, "value": "2026-08-11T01:17:52.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-20337", "record": "MSRC_CVE-2026-20337", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-11T01:17:52Z", "date_only": false, "value": "2026-08-11T01:17:52.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-20337", "record": "MSRC_CVE-2026-20337", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-11T12:32:29.139Z", "date_only": false, "value": "2026-08-11T12:32:29.139653Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tugate.ch/post/3mssmoymlhs2u", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "7ee02ab5-b13b-4b06-8722-04f07839bce7", "content": "Cisco alerta para duas falhas graves no ClamAV que amea\u00e7am sistemas Windows, permitindo ataques remotos de nega\u00e7\u00e3o de servi\u00e7o (DoS) sem autentica\u00e7\u00e3o pr\u00e9via. As vulnerabilidades, CVE-2026-20337 e CVE-2026-20338, afetam o analisador de ficheiros ZIP do sistema de c\u00f3digo aberto. \ud83d\udea8\n\n#alerta #graves #win", "url": "https://bsky.app/profile/tugate.ch/post/3mssmoymlhs2u"}, {"timestamp": "2026-08-11T13:59:35.855Z", "date_only": false, "value": "2026-08-11T13:59:35.855311Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117077231235982411", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "01ecc0da-6b5f-482f-953b-bb5e2f07fcf4", "content": "The security flaws (tracked as CVE-2026-20337 and CVE-2026-20338) were found in the ZIP archive parser of ClamAV (Clam AntiVirus), the open-source and cross-platform engine used to scan files for malware. https://www.bleepingcomputer.com/news/security/cisco-warns-of-high-severity-clamav-flaws-with-public-exploits/", "url": "https://infosec.exchange/users/jbhall56/statuses/117077231235982411"}, {"timestamp": "2026-08-11T13:59:51.939Z", "date_only": false, "value": "2026-08-11T13:59:51.939555Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mssrla3bc22q", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "eed23d91-ec7e-45c0-8a55-0218461f3614", "content": "The security flaws (tracked as CVE-2026-20337 and CVE-2026-20338) were found in the ZIP archive parser of ClamAV (Clam AntiVirus), the open-source and cross-platform engine used to scan files for malware. www.bleepingcomputer.com/news/securit...", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3mssrla3bc22q"}, {"timestamp": "2026-08-11T14:01:36.678Z", "date_only": false, "value": "2026-08-11T14:01:36.678049Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/methiaff.bsky.social/post/3mssroex7ku2d", "record": "cve-2026-20337", "field": "creation_timestamp", "uuid": "3f07c99a-d5d7-4132-ba9c-4b93467bcf3f", "content": "clamav zip parser flaws. so cve-2026-20337 and cve-2026-20338 are dos vectors.", "url": "https://bsky.app/profile/methiaff.bsky.social/post/3mssroex7ku2d"}, {"timestamp": "2026-08-11T18:54:19.877Z", "date_only": false, "value": "2026-08-11T18:54:19.877", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20337", "record": "FKIE_CVE-2026-20337", "field": "lastModified"}, {"timestamp": "2026-08-12T04:45:10.241Z", "date_only": false, "value": "2026-08-12T04:45:10.241688Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "f7236d70-06b5-47ea-bba3-ae5d87a0f4b1", "url": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812"}, {"timestamp": "2026-08-12T08:08:17.363Z", "date_only": false, "value": "2026-08-12T08:08:17.363695Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3msuofib4cw26", "record": "cve-2026-20337", "field": "creation_timestamp", "uuid": "f872797c-aa51-428c-82a2-576f4de1fd74", "content": "\ud83d\udcf0 Cisco Peringatkan Dua Kerentanan ClamAV dengan Exploit yang Sudah Tersedia untuk Publik\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/12/kerentanan-clamav-cve-2026-20337-cve-2026-20338/\n\n#antivirus #cisco #clamav #cybersecurity #denialOfService #dos #exploit #keamananSiber #", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3msuofib4cw26"}, {"timestamp": "2026-08-13T01:00:04.053Z", "date_only": false, "value": "2026-08-13T01:00:04.053662Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8496", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "f742204c-101e-427c-bcbf-ab11f5f03daa", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "url": "https://t.me/true_secator/8496"}, {"timestamp": "2026-08-13T08:45:38.833Z", "date_only": false, "value": "2026-08-13T08:45:38.833889Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0992", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "22d09ac7-bf6e-4078-ba1b-8a822881da1e", "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0992"}, {"timestamp": "2026-08-13T08:46:59.317Z", "date_only": false, "value": "2026-08-13T08:46:59.317060Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2005", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "1d3d7135-0872-459a-8376-c129accfc073", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2005"}, {"timestamp": "2026-08-13T20:11:34Z", "date_only": false, "value": "2026-08-13T20:11:34+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-CLAMAV-WUUVVD26", "record": "CISCO-SA-CLAMAV-WUUVVD26", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-13T20:11:34Z", "date_only": false, "value": "2026-08-13T20:11:34+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-CLAMAV-WUUVVD26", "record": "CISCO-SA-CLAMAV-WUUVVD26", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-13T20:11:38Z", "date_only": false, "value": "2026-08-13T20:11:38+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-CLAMAV-WUUVVD26", "record": "CISCO-SA-CLAMAV-WUUVVD26", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-14T00:00:09.479Z", "date_only": false, "value": "2026-08-14T00:00:09.479913Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/8496", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "8bef7a09-575f-4015-9a08-c23a4fcf8251", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "url": "https://t.me/true_secator/8496"}, {"timestamp": "2026-08-21T23:00:06.401Z", "date_only": false, "value": "2026-08-21T23:00:06.401959Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/2587", "record": "CVE-2026-20337", "field": "creation_timestamp", "uuid": "4603a92e-6b5d-4456-90fb-2cea8e79e464", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "url": "https://t.me/pphm_HackerNews/2587"}, {"timestamp": "2026-08-23T14:49:27Z", "date_only": false, "value": "2026-08-23T14:49:27.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-20337", "record": "MSRC_CVE-2026-20337", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-08-23T14:49:27Z", "date_only": false, "value": "2026-08-23T14:49:27.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-20337", "record": "MSRC_CVE-2026-20337", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": false, "value": "2026-08-24T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11583-1", "record": "OPENSUSE-SU-2026:11583-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": false, "value": "2026-08-24T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11583-1", "record": "OPENSUSE-SU-2026:11583-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": false, "value": "2026-08-24T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11583-1", "record": "OPENSUSE-SU-2026:11583-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": false, "value": "2026-08-24T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11583-1", "record": "OPENSUSE-SU-2026:11583-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-24T07:05:02.563Z", "date_only": false, "value": "2026-08-24T07:05:02.563Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-20337", "record": "MSRC_CVE-2026-20337", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-11T12:00:06Z", "date_only": false, "value": "2026-09-11T12:00:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:23706-1", "record": "SUSE-SU-2026:23706-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-11T12:00:06Z", "date_only": false, "value": "2026-09-11T12:00:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:23727-1", "record": "SUSE-SU-2026:23727-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-11T12:00:06Z", "date_only": false, "value": "2026-09-11T12:00:06Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:23706-1", "record": "SUSE-SU-2026:23706-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-09-11T12:00:06Z", "date_only": false, "value": "2026-09-11T12:00:06Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:23727-1", "record": "SUSE-SU-2026:23727-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-09-11T12:00:06Z", "date_only": false, "value": "2026-09-11T12:00:06Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:23706-1", "record": "SUSE-SU-2026:23706-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-11T12:00:06Z", "date_only": false, "value": "2026-09-11T12:00:06Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:23727-1", "record": "SUSE-SU-2026:23727-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-11T12:00:06Z", "date_only": false, "value": "2026-09-11T12:00:06Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:23706-1", "record": "SUSE-SU-2026:23706-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-11T12:00:06Z", "date_only": false, "value": "2026-09-11T12:00:06Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:23727-1", "record": "SUSE-SU-2026:23727-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-11T12:01:10Z", "date_only": false, "value": "2026-09-11T12:01:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21831-1", "record": "OPENSUSE-SU-2026:21831-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-11T12:01:10Z", "date_only": false, "value": "2026-09-11T12:01:10Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21831-1", "record": "OPENSUSE-SU-2026:21831-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-09-11T12:01:10Z", "date_only": false, "value": "2026-09-11T12:01:10Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21831-1", "record": "OPENSUSE-SU-2026:21831-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-11T12:01:10Z", "date_only": false, "value": "2026-09-11T12:01:10Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21831-1", "record": "OPENSUSE-SU-2026:21831-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-14T14:48:44Z", "date_only": false, "value": "2026-09-14T14:48:44Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:4179-1", "record": "SUSE-SU-2026:4179-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-14T14:48:44Z", "date_only": false, "value": "2026-09-14T14:48:44Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:4179-1", "record": "SUSE-SU-2026:4179-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-09-14T14:48:44Z", "date_only": false, "value": "2026-09-14T14:48:44Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:4179-1", "record": "SUSE-SU-2026:4179-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-14T14:48:44Z", "date_only": false, "value": "2026-09-14T14:48:44Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:4179-1", "record": "SUSE-SU-2026:4179-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-15T16:11:30Z", "date_only": false, "value": "2026-09-15T16:11:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:4179-1", "record": "SUSE-SU-2026:4179-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:54:52Z", "date_only": false, "value": "2026-09-16T19:54:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:4179-1", "record": "SUSE-SU-2026:4179-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:25:12Z", "date_only": false, "value": "2026-09-16T20:25:12Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11583-1", "record": "OPENSUSE-SU-2026:11583-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:47:54Z", "date_only": false, "value": "2026-09-16T20:47:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21831-1", "record": "OPENSUSE-SU-2026:21831-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:57:37Z", "date_only": false, "value": "2026-09-16T20:57:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:4179-1", "record": "SUSE-SU-2026:4179-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-16T21:27:14Z", "date_only": false, "value": "2026-09-16T21:27:14Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11583-1", "record": "OPENSUSE-SU-2026:11583-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-16T21:48:49Z", "date_only": false, "value": "2026-09-16T21:48:49Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21831-1", "record": "OPENSUSE-SU-2026:21831-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T16:48:42Z", "date_only": false, "value": "2026-09-17T16:48:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:4179-1", "record": "SUSE-SU-2026:4179-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-17T16:48:42Z", "date_only": false, "value": "2026-09-17T16:48:42Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:4179-1", "record": "SUSE-SU-2026:4179-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T17:20:54Z", "date_only": false, "value": "2026-09-17T17:20:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11583-1", "record": "OPENSUSE-SU-2026:11583-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-17T17:20:54Z", "date_only": false, "value": "2026-09-17T17:20:54Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11583-1", "record": "OPENSUSE-SU-2026:11583-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T17:44:24Z", "date_only": false, "value": "2026-09-17T17:44:24Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21831-1", "record": "OPENSUSE-SU-2026:21831-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-17T17:44:24Z", "date_only": false, "value": "2026-09-17T17:44:24Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21831-1", "record": "OPENSUSE-SU-2026:21831-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-21T18:33:49Z", "date_only": false, "value": "2026-09-21T18:33:49Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-20337", "record": "UBUNTU-CVE-2026-20337", "field": "modified"}, {"timestamp": "2026-09-29T08:19:42Z", "date_only": false, "value": "2026-09-29T08:19:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:23706-1", "record": "SUSE-SU-2026:23706-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-29T08:19:42Z", "date_only": false, "value": "2026-09-29T08:19:42Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:23706-1", "record": "SUSE-SU-2026:23706-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-29T08:19:53Z", "date_only": false, "value": "2026-09-29T08:19:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:23727-1", "record": "SUSE-SU-2026:23727-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-29T08:19:53Z", "date_only": false, "value": "2026-09-29T08:19:53Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:23727-1", "record": "SUSE-SU-2026:23727-1", "field": "document.tracking.current_release_date"}]}