Vulnerability-Lookup

CVE-2026-20031 (GCVE-0-2026-20031)

Vulnerability from cvelistv5 – Published: 2026-03-04 17:17 – Updated: 2026-03-05 15:52

Title

ClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability

Summary

A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-03-05 15:51 UTC

CWE

CWE-248 - Uncaught Exception

Assigner

cisco mitre root

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

1 product

Vendor	Product	Version	CPE status
Cisco	Cisco Secure Endpoint	Affected: 7.0.5 Affected: 6.2.19 Affected: 7.3.3 Affected: 7.2.13 Affected: 6.1.5 Affected: 6.3.1 Affected: 6.2.5 Affected: 7.3.5 Affected: 6.2.1 Affected: 7.2.7 Affected: 7.1.1 Affected: 6.3.5 Affected: 6.2.9 Affected: 7.3.1 Affected: 6.1.7 Affected: 7.2.11 Affected: 7.2.3 Affected: 7.1.5 Affected: 6.3.3 Affected: 7.3.9 Affected: 6.2.3 Affected: 6.1.9 Affected: 6.0.9 Affected: 7.2.5 Affected: 6.0.7 Affected: 6.3.7 Affected: 1.12.3 Affected: 1.8.0 Affected: 1.11.1 Affected: 1.12.4 Affected: 1.10.0 Affected: 1.12.0 Affected: 1.8.1 Affected: 1.10.1 Affected: 1.12.1 Affected: 1.12.6 Affected: 1.14.0 Affected: 1.10.2 Affected: 1.12.7 Affected: 1.12.2 Affected: 1.6.0 Affected: 1.9.0 Affected: 1.11.0 Affected: 1.7.0 Affected: 1.13.0 Affected: 1.8.4 Affected: 1.13.1 Affected: 1.9.1 Affected: 1.12.5 Affected: 1.13.2 Affected: 2.0.2 Affected: 1.1.0 Affected: 2.0.0 Affected: 2.0.1 Affected: 8.1.7.21512 Affected: 8.1.7 Affected: 8.1.5 Affected: 8.1.3.21242 Affected: 8.1.3 Affected: 8.1.5.21322 Affected: 8.1.7.21417 Affected: 2.1.0.14 Affected: 2.2.0 Affected: 2.3.0 Affected: 2.4.0 Affected: 2.5.0 Affected: 2.6.0 Affected: 2.7.0 Affected: 2.8.0 Affected: 2.9.0 Affected: 2.10.0 Affected: 2.10.1 Affected: 2.11.0 Affected: 1.14.1 Affected: 1.15.1 Affected: 1.15.2 Affected: 1.15.3 Affected: 1.15.4 Affected: 1.15.5 Affected: 1.15.6 Affected: 1.16.0 Affected: 1.16.1 Affected: 1.16.2 Affected: 1.16.3 Affected: 1.18.0 Affected: 1.18.1 Affected: 1.20.0 Affected: 1.21.0 Affected: 1.21.1 Affected: 1.21.2 Affected: 1.21.3 Affected: 1.22.0 Affected: 1.22.1 Affected: 1.22.2 Affected: 1.22.3 Affected: 1.22.4 Affected: 1.24.0 Affected: 1.24.1 Affected: 1.24.2 Affected: 1.24.3 Affected: 1.24.4 Affected: 1.26.0 Affected: 1.24.5 Affected: 1.26.1 Affected: 1.27.0 Affected: 1.15.0 Affected: 1.17.0 Affected: 1.17.1 Affected: 1.17.2 Affected: 1.19.0 Affected: 1.20.1 Affected: 1.20.2 Affected: 1.20.3 Affected: 1.20.4 Affected: 1.20.5 Affected: 1.20.6 Affected: 1.23.0 Affected: 1.23.1 Affected: 1.20.7 Affected: 1.20.8 Affected: 1.25.0 Affected: 1.25.1 Affected: 1.25.2 Affected: 1.27.1 Affected: 1.27.2 Affected: 7.3.13 Affected: 7.3.15 Affected: 7.4.1 Affected: 7.4.1.20425 Affected: 7.4.1.20439 Affected: 7.4.3 Affected: 7.4.3.20679 Affected: 7.4.5 Affected: 7.5.1.20813 Affected: 7.5.1.20833 Affected: 7.5.3 Affected: 7.5.5 Affected: 8.0.1.21160 Affected: 8.0.1.21164 Affected: 7.5.7 Affected: 7.5.9 Affected: 7.5.11 Affected: 8.1.7.21585 Affected: 7.5.13.21586 Affected: 7.5.13.21598 Affected: 8.2.1.21612 Affected: 8.2.1.21650 Affected: 7.5.15.21611 Affected: 7.5.17.21680 Affected: 8.2.3.30119 Affected: 8.2.4.30130 Affected: 8.4.0 Affected: 7.5.19 Affected: 8.4.1.30298 Affected: 8.4.2.30317 Affected: 8.4.1.30307 Affected: 7.5.20 Affected: 8.4.3 Affected: 8.4.4.30419 Affected: 8.4.4.30467 Affected: 7.5.21.21732 Affected: 8.4.5.30483	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20031",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-05T15:51:58.298217Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-05T15:52:07.708Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "2.0.2"
            },
            {
              "status": "affected",
              "version": "1.1.0"
            },
            {
              "status": "affected",
              "version": "2.0.0"
            },
            {
              "status": "affected",
              "version": "2.0.1"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "2.1.0.14"
            },
            {
              "status": "affected",
              "version": "2.2.0"
            },
            {
              "status": "affected",
              "version": "2.3.0"
            },
            {
              "status": "affected",
              "version": "2.4.0"
            },
            {
              "status": "affected",
              "version": "2.5.0"
            },
            {
              "status": "affected",
              "version": "2.6.0"
            },
            {
              "status": "affected",
              "version": "2.7.0"
            },
            {
              "status": "affected",
              "version": "2.8.0"
            },
            {
              "status": "affected",
              "version": "2.9.0"
            },
            {
              "status": "affected",
              "version": "2.10.0"
            },
            {
              "status": "affected",
              "version": "2.10.1"
            },
            {
              "status": "affected",
              "version": "2.11.0"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "Uncaught Exception",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-04T17:44:55.869Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-clamav-css-Fn4QSZ",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ"
        }
      ],
      "source": {
        "advisory": "cisco-sa-clamav-css-Fn4QSZ",
        "defects": [
          "CSCwq32780"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "ClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20031",
    "datePublished": "2026-03-04T17:17:33.372Z",
    "dateReserved": "2025-10-08T11:59:15.353Z",
    "dateUpdated": "2026-03-05T15:52:07.708Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-20031",
      "date": "2026-09-10",
      "epss": "0.00414",
      "percentile": "0.34795"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-20031\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2026-03-04T18:16:16.773\",\"lastModified\":\"2026-06-17T10:16:56.607\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\\r\\n\\r\\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en el m\u00f3dulo HTML Cascading Style Sheets (CSS) de ClamAV podr\u00eda permitir a un atacante remoto no autenticado causar una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en un dispositivo afectado.\\n\\nEsta vulnerabilidad se debe a un manejo de errores inadecuado al dividir cadenas UTF-8. Un atacante podr\u00eda explotar esta vulnerabilidad al enviar un archivo HTML manipulado para ser escaneado por ClamAV en un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante terminar el proceso de escaneo.\"}],\"affected\":[{\"source\":\"psirt@cisco.com\",\"affectedData\":[{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Endpoint\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"6.2.19\",\"status\":\"affected\"},{\"version\":\"7.3.3\",\"status\":\"affected\"},{\"version\":\"7.2.13\",\"status\":\"affected\"},{\"version\":\"6.1.5\",\"status\":\"affected\"},{\"version\":\"6.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.5\",\"status\":\"affected\"},{\"version\":\"7.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.7\",\"status\":\"affected\"},{\"version\":\"7.1.1\",\"status\":\"affected\"},{\"version\":\"6.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.9\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"6.1.7\",\"status\":\"affected\"},{\"version\":\"7.2.11\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.1.5\",\"status\":\"affected\"},{\"version\":\"6.3.3\",\"status\":\"affected\"},{\"version\":\"7.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.1.9\",\"status\":\"affected\"},{\"version\":\"6.0.9\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"6.0.7\",\"status\":\"affected\"},{\"version\":\"6.3.7\",\"status\":\"affected\"},{\"version\":\"1.12.3\",\"status\":\"affected\"},{\"version\":\"1.8.0\",\"status\":\"affected\"},{\"version\":\"1.11.1\",\"status\":\"affected\"},{\"version\":\"1.12.4\",\"status\":\"affected\"},{\"version\":\"1.10.0\",\"status\":\"affected\"},{\"version\":\"1.12.0\",\"status\":\"affected\"},{\"version\":\"1.8.1\",\"status\":\"affected\"},{\"version\":\"1.10.1\",\"status\":\"affected\"},{\"version\":\"1.12.1\",\"status\":\"affected\"},{\"version\":\"1.12.6\",\"status\":\"affected\"},{\"version\":\"1.14.0\",\"status\":\"affected\"},{\"version\":\"1.10.2\",\"status\":\"affected\"},{\"version\":\"1.12.7\",\"status\":\"affected\"},{\"version\":\"1.12.2\",\"status\":\"affected\"},{\"version\":\"1.6.0\",\"status\":\"affected\"},{\"version\":\"1.9.0\",\"status\":\"affected\"},{\"version\":\"1.11.0\",\"status\":\"affected\"},{\"version\":\"1.7.0\",\"status\":\"affected\"},{\"version\":\"1.13.0\",\"status\":\"affected\"},{\"version\":\"1.8.4\",\"status\":\"affected\"},{\"version\":\"1.13.1\",\"status\":\"affected\"},{\"version\":\"1.9.1\",\"status\":\"affected\"},{\"version\":\"1.12.5\",\"status\":\"affected\"},{\"version\":\"1.13.2\",\"status\":\"affected\"},{\"version\":\"2.0.2\",\"status\":\"affected\"},{\"version\":\"1.1.0\",\"status\":\"affected\"},{\"version\":\"2.0.0\",\"status\":\"affected\"},{\"version\":\"2.0.1\",\"status\":\"affected\"},{\"version\":\"8.1.7.21512\",\"status\":\"affected\"},{\"version\":\"8.1.7\",\"status\":\"affected\"},{\"version\":\"8.1.5\",\"status\":\"affected\"},{\"version\":\"8.1.3.21242\",\"status\":\"affected\"},{\"version\":\"8.1.3\",\"status\":\"affected\"},{\"version\":\"8.1.5.21322\",\"status\":\"affected\"},{\"version\":\"8.1.7.21417\",\"status\":\"affected\"},{\"version\":\"2.1.0.14\",\"status\":\"affected\"},{\"version\":\"2.2.0\",\"status\":\"affected\"},{\"version\":\"2.3.0\",\"status\":\"affected\"},{\"version\":\"2.4.0\",\"status\":\"affected\"},{\"version\":\"2.5.0\",\"status\":\"affected\"},{\"version\":\"2.6.0\",\"status\":\"affected\"},{\"version\":\"2.7.0\",\"status\":\"affected\"},{\"version\":\"2.8.0\",\"status\":\"affected\"},{\"version\":\"2.9.0\",\"status\":\"affected\"},{\"version\":\"2.10.0\",\"status\":\"affected\"},{\"version\":\"2.10.1\",\"status\":\"affected\"},{\"version\":\"2.11.0\",\"status\":\"affected\"},{\"version\":\"1.14.1\",\"status\":\"affected\"},{\"version\":\"1.15.1\",\"status\":\"affected\"},{\"version\":\"1.15.2\",\"status\":\"affected\"},{\"version\":\"1.15.3\",\"status\":\"affected\"},{\"version\":\"1.15.4\",\"status\":\"affected\"},{\"version\":\"1.15.5\",\"status\":\"affected\"},{\"version\":\"1.15.6\",\"status\":\"affected\"},{\"version\":\"1.16.0\",\"status\":\"affected\"},{\"version\":\"1.16.1\",\"status\":\"affected\"},{\"version\":\"1.16.2\",\"status\":\"affected\"},{\"version\":\"1.16.3\",\"status\":\"affected\"},{\"version\":\"1.18.0\",\"status\":\"affected\"},{\"version\":\"1.18.1\",\"status\":\"affected\"},{\"version\":\"1.20.0\",\"status\":\"affected\"},{\"version\":\"1.21.0\",\"status\":\"affected\"},{\"version\":\"1.21.1\",\"status\":\"affected\"},{\"version\":\"1.21.2\",\"status\":\"affected\"},{\"version\":\"1.21.3\",\"status\":\"affected\"},{\"version\":\"1.22.0\",\"status\":\"affected\"},{\"version\":\"1.22.1\",\"status\":\"affected\"},{\"version\":\"1.22.2\",\"status\":\"affected\"},{\"version\":\"1.22.3\",\"status\":\"affected\"},{\"version\":\"1.22.4\",\"status\":\"affected\"},{\"version\":\"1.24.0\",\"status\":\"affected\"},{\"version\":\"1.24.1\",\"status\":\"affected\"},{\"version\":\"1.24.2\",\"status\":\"affected\"},{\"version\":\"1.24.3\",\"status\":\"affected\"},{\"version\":\"1.24.4\",\"status\":\"affected\"},{\"version\":\"1.26.0\",\"status\":\"affected\"},{\"version\":\"1.24.5\",\"status\":\"affected\"},{\"version\":\"1.26.1\",\"status\":\"affected\"},{\"version\":\"1.27.0\",\"status\":\"affected\"},{\"version\":\"1.15.0\",\"status\":\"affected\"},{\"version\":\"1.17.0\",\"status\":\"affected\"},{\"version\":\"1.17.1\",\"status\":\"affected\"},{\"version\":\"1.17.2\",\"status\":\"affected\"},{\"version\":\"1.19.0\",\"status\":\"affected\"},{\"version\":\"1.20.1\",\"status\":\"affected\"},{\"version\":\"1.20.2\",\"status\":\"affected\"},{\"version\":\"1.20.3\",\"status\":\"affected\"},{\"version\":\"1.20.4\",\"status\":\"affected\"},{\"version\":\"1.20.5\",\"status\":\"affected\"},{\"version\":\"1.20.6\",\"status\":\"affected\"},{\"version\":\"1.23.0\",\"status\":\"affected\"},{\"version\":\"1.23.1\",\"status\":\"affected\"},{\"version\":\"1.20.7\",\"status\":\"affected\"},{\"version\":\"1.20.8\",\"status\":\"affected\"},{\"version\":\"1.25.0\",\"status\":\"affected\"},{\"version\":\"1.25.1\",\"status\":\"affected\"},{\"version\":\"1.25.2\",\"status\":\"affected\"},{\"version\":\"1.27.1\",\"status\":\"affected\"},{\"version\":\"1.27.2\",\"status\":\"affected\"},{\"version\":\"7.3.13\",\"status\":\"affected\"},{\"version\":\"7.3.15\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"},{\"version\":\"7.4.1.20425\",\"status\":\"affected\"},{\"version\":\"7.4.1.20439\",\"status\":\"affected\"},{\"version\":\"7.4.3\",\"status\":\"affected\"},{\"version\":\"7.4.3.20679\",\"status\":\"affected\"},{\"version\":\"7.4.5\",\"status\":\"affected\"},{\"version\":\"7.5.1.20813\",\"status\":\"affected\"},{\"version\":\"7.5.1.20833\",\"status\":\"affected\"},{\"version\":\"7.5.3\",\"status\":\"affected\"},{\"version\":\"7.5.5\",\"status\":\"affected\"},{\"version\":\"8.0.1.21160\",\"status\":\"affected\"},{\"version\":\"8.0.1.21164\",\"status\":\"affected\"},{\"version\":\"7.5.7\",\"status\":\"affected\"},{\"version\":\"7.5.9\",\"status\":\"affected\"},{\"version\":\"7.5.11\",\"status\":\"affected\"},{\"version\":\"8.1.7.21585\",\"status\":\"affected\"},{\"version\":\"7.5.13.21586\",\"status\":\"affected\"},{\"version\":\"7.5.13.21598\",\"status\":\"affected\"},{\"version\":\"8.2.1.21612\",\"status\":\"affected\"},{\"version\":\"8.2.1.21650\",\"status\":\"affected\"},{\"version\":\"7.5.15.21611\",\"status\":\"affected\"},{\"version\":\"7.5.17.21680\",\"status\":\"affected\"},{\"version\":\"8.2.3.30119\",\"status\":\"affected\"},{\"version\":\"8.2.4.30130\",\"status\":\"affected\"},{\"version\":\"8.4.0\",\"status\":\"affected\"},{\"version\":\"7.5.19\",\"status\":\"affected\"},{\"version\":\"8.4.1.30298\",\"status\":\"affected\"},{\"version\":\"8.4.2.30317\",\"status\":\"affected\"},{\"version\":\"8.4.1.30307\",\"status\":\"affected\"},{\"version\":\"7.5.20\",\"status\":\"affected\"},{\"version\":\"8.4.3\",\"status\":\"affected\"},{\"version\":\"8.4.4.30419\",\"status\":\"affected\"},{\"version\":\"8.4.4.30467\",\"status\":\"affected\"},{\"version\":\"7.5.21.21732\",\"status\":\"affected\"},{\"version\":\"8.4.5.30483\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-05T15:51:58.298217Z\",\"id\":\"CVE-2026-20031\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-248\"}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ\",\"source\":\"psirt@cisco.com\"}]}}",
    "redhat_vex": {
      "current_release_date": "2026-08-13T01:40:51+00:00",
      "cve": "CVE-2026-20031",
      "id": "CVE-2026-20031",
      "initial_release_date": "2026-03-04T17:17:33.372000+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "ClamAV: improper error handling when splitting UTF-8 strings in the HTML Cascading Style Sheets (CSS) module",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-20031.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-28T17:20:13Z",
      "cve": "CVE-2026-20031",
      "id": "CVE-2026-20031",
      "initial_release_date": "2026-03-05T13:56:52Z",
      "product_status:known_not_affected": "20",
      "product_status:recommended": "203",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-20031",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-20031.json",
      "version": "19"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-20031\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-05T15:51:58.298217Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-05T15:52:03.337Z\"}}], \"cna\": {\"title\": \"ClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability\", \"source\": {\"defects\": [\"CSCwq32780\"], \"advisory\": \"cisco-sa-clamav-css-Fn4QSZ\", \"discovery\": \"EXTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Secure Endpoint\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.0.5\"}, {\"status\": \"affected\", \"version\": \"6.2.19\"}, {\"status\": \"affected\", \"version\": \"7.3.3\"}, {\"status\": \"affected\", \"version\": \"7.2.13\"}, {\"status\": \"affected\", \"version\": \"6.1.5\"}, {\"status\": \"affected\", \"version\": \"6.3.1\"}, {\"status\": \"affected\", \"version\": \"6.2.5\"}, {\"status\": \"affected\", \"version\": \"7.3.5\"}, {\"status\": \"affected\", \"version\": \"6.2.1\"}, {\"status\": \"affected\", \"version\": \"7.2.7\"}, {\"status\": \"affected\", \"version\": \"7.1.1\"}, {\"status\": \"affected\", \"version\": \"6.3.5\"}, {\"status\": \"affected\", \"version\": \"6.2.9\"}, {\"status\": \"affected\", \"version\": \"7.3.1\"}, {\"status\": \"affected\", \"version\": \"6.1.7\"}, {\"status\": \"affected\", \"version\": \"7.2.11\"}, {\"status\": \"affected\", \"version\": \"7.2.3\"}, {\"status\": \"affected\", \"version\": \"7.1.5\"}, {\"status\": \"affected\", \"version\": \"6.3.3\"}, {\"status\": \"affected\", \"version\": \"7.3.9\"}, {\"status\": \"affected\", \"version\": \"6.2.3\"}, {\"status\": \"affected\", \"version\": \"6.1.9\"}, {\"status\": \"affected\", \"version\": \"6.0.9\"}, {\"status\": \"affected\", \"version\": \"7.2.5\"}, {\"status\": \"affected\", \"version\": \"6.0.7\"}, {\"status\": \"affected\", \"version\": \"6.3.7\"}, {\"status\": \"affected\", \"version\": \"1.12.3\"}, {\"status\": \"affected\", \"version\": \"1.8.0\"}, {\"status\": \"affected\", \"version\": \"1.11.1\"}, {\"status\": \"affected\", \"version\": \"1.12.4\"}, {\"status\": \"affected\", \"version\": \"1.10.0\"}, {\"status\": \"affected\", \"version\": \"1.12.0\"}, {\"status\": \"affected\", \"version\": \"1.8.1\"}, {\"status\": \"affected\", \"version\": \"1.10.1\"}, {\"status\": \"affected\", \"version\": \"1.12.1\"}, {\"status\": \"affected\", \"version\": \"1.12.6\"}, {\"status\": \"affected\", \"version\": \"1.14.0\"}, {\"status\": \"affected\", \"version\": \"1.10.2\"}, {\"status\": \"affected\", \"version\": \"1.12.7\"}, {\"status\": \"affected\", \"version\": \"1.12.2\"}, {\"status\": \"affected\", \"version\": \"1.6.0\"}, {\"status\": \"affected\", \"version\": \"1.9.0\"}, {\"status\": \"affected\", \"version\": \"1.11.0\"}, {\"status\": \"affected\", \"version\": \"1.7.0\"}, {\"status\": \"affected\", \"version\": \"1.13.0\"}, {\"status\": \"affected\", \"version\": \"1.8.4\"}, {\"status\": \"affected\", \"version\": \"1.13.1\"}, {\"status\": \"affected\", \"version\": \"1.9.1\"}, {\"status\": \"affected\", \"version\": \"1.12.5\"}, {\"status\": \"affected\", \"version\": \"1.13.2\"}, {\"status\": \"affected\", \"version\": \"2.0.2\"}, {\"status\": \"affected\", \"version\": \"1.1.0\"}, {\"status\": \"affected\", \"version\": \"2.0.0\"}, {\"status\": \"affected\", \"version\": \"2.0.1\"}, {\"status\": \"affected\", \"version\": \"8.1.7.21512\"}, {\"status\": \"affected\", \"version\": \"8.1.7\"}, {\"status\": \"affected\", \"version\": \"8.1.5\"}, {\"status\": \"affected\", \"version\": \"8.1.3.21242\"}, {\"status\": \"affected\", \"version\": \"8.1.3\"}, {\"status\": \"affected\", \"version\": \"8.1.5.21322\"}, {\"status\": \"affected\", \"version\": \"8.1.7.21417\"}, {\"status\": \"affected\", \"version\": \"2.1.0.14\"}, {\"status\": \"affected\", \"version\": \"2.2.0\"}, {\"status\": \"affected\", \"version\": \"2.3.0\"}, {\"status\": \"affected\", \"version\": \"2.4.0\"}, {\"status\": \"affected\", \"version\": \"2.5.0\"}, {\"status\": \"affected\", \"version\": \"2.6.0\"}, {\"status\": \"affected\", \"version\": \"2.7.0\"}, {\"status\": \"affected\", \"version\": \"2.8.0\"}, {\"status\": \"affected\", \"version\": \"2.9.0\"}, {\"status\": \"affected\", \"version\": \"2.10.0\"}, {\"status\": \"affected\", \"version\": \"2.10.1\"}, {\"status\": \"affected\", \"version\": \"2.11.0\"}, {\"status\": \"affected\", \"version\": \"1.14.1\"}, {\"status\": \"affected\", \"version\": \"1.15.1\"}, {\"status\": \"affected\", \"version\": \"1.15.2\"}, {\"status\": \"affected\", \"version\": \"1.15.3\"}, {\"status\": \"affected\", \"version\": \"1.15.4\"}, {\"status\": \"affected\", \"version\": \"1.15.5\"}, {\"status\": \"affected\", \"version\": \"1.15.6\"}, {\"status\": \"affected\", \"version\": \"1.16.0\"}, {\"status\": \"affected\", \"version\": \"1.16.1\"}, {\"status\": \"affected\", \"version\": \"1.16.2\"}, {\"status\": \"affected\", \"version\": \"1.16.3\"}, {\"status\": \"affected\", \"version\": \"1.18.0\"}, {\"status\": \"affected\", \"version\": \"1.18.1\"}, {\"status\": \"affected\", \"version\": \"1.20.0\"}, {\"status\": \"affected\", \"version\": \"1.21.0\"}, {\"status\": \"affected\", \"version\": \"1.21.1\"}, {\"status\": \"affected\", \"version\": \"1.21.2\"}, {\"status\": \"affected\", \"version\": \"1.21.3\"}, {\"status\": \"affected\", \"version\": \"1.22.0\"}, {\"status\": \"affected\", \"version\": \"1.22.1\"}, {\"status\": \"affected\", \"version\": \"1.22.2\"}, {\"status\": \"affected\", \"version\": \"1.22.3\"}, {\"status\": \"affected\", \"version\": \"1.22.4\"}, {\"status\": \"affected\", \"version\": \"1.24.0\"}, {\"status\": \"affected\", \"version\": \"1.24.1\"}, {\"status\": \"affected\", \"version\": \"1.24.2\"}, {\"status\": \"affected\", \"version\": \"1.24.3\"}, {\"status\": \"affected\", \"version\": \"1.24.4\"}, {\"status\": \"affected\", \"version\": \"1.26.0\"}, {\"status\": \"affected\", \"version\": \"1.24.5\"}, {\"status\": \"affected\", \"version\": \"1.26.1\"}, {\"status\": \"affected\", \"version\": \"1.27.0\"}, {\"status\": \"affected\", \"version\": \"1.15.0\"}, {\"status\": \"affected\", \"version\": \"1.17.0\"}, {\"status\": \"affected\", \"version\": \"1.17.1\"}, {\"status\": \"affected\", \"version\": \"1.17.2\"}, {\"status\": \"affected\", \"version\": \"1.19.0\"}, {\"status\": \"affected\", \"version\": \"1.20.1\"}, {\"status\": \"affected\", \"version\": \"1.20.2\"}, {\"status\": \"affected\", \"version\": \"1.20.3\"}, {\"status\": \"affected\", \"version\": \"1.20.4\"}, {\"status\": \"affected\", \"version\": \"1.20.5\"}, {\"status\": \"affected\", \"version\": \"1.20.6\"}, {\"status\": \"affected\", \"version\": \"1.23.0\"}, {\"status\": \"affected\", \"version\": \"1.23.1\"}, {\"status\": \"affected\", \"version\": \"1.20.7\"}, {\"status\": \"affected\", \"version\": \"1.20.8\"}, {\"status\": \"affected\", \"version\": \"1.25.0\"}, {\"status\": \"affected\", \"version\": \"1.25.1\"}, {\"status\": \"affected\", \"version\": \"1.25.2\"}, {\"status\": \"affected\", \"version\": \"1.27.1\"}, {\"status\": \"affected\", \"version\": \"1.27.2\"}, {\"status\": \"affected\", \"version\": \"7.3.13\"}, {\"status\": \"affected\", \"version\": \"7.3.15\"}, {\"status\": \"affected\", \"version\": \"7.4.1\"}, {\"status\": \"affected\", \"version\": \"7.4.1.20425\"}, {\"status\": \"affected\", \"version\": \"7.4.1.20439\"}, {\"status\": \"affected\", \"version\": \"7.4.3\"}, {\"status\": \"affected\", \"version\": \"7.4.3.20679\"}, {\"status\": \"affected\", \"version\": \"7.4.5\"}, {\"status\": \"affected\", \"version\": \"7.5.1.20813\"}, {\"status\": \"affected\", \"version\": \"7.5.1.20833\"}, {\"status\": \"affected\", \"version\": \"7.5.3\"}, {\"status\": \"affected\", \"version\": \"7.5.5\"}, {\"status\": \"affected\", \"version\": \"8.0.1.21160\"}, {\"status\": \"affected\", \"version\": \"8.0.1.21164\"}, {\"status\": \"affected\", \"version\": \"7.5.7\"}, {\"status\": \"affected\", \"version\": \"7.5.9\"}, {\"status\": \"affected\", \"version\": \"7.5.11\"}, {\"status\": \"affected\", \"version\": \"8.1.7.21585\"}, {\"status\": \"affected\", \"version\": \"7.5.13.21586\"}, {\"status\": \"affected\", \"version\": \"7.5.13.21598\"}, {\"status\": \"affected\", \"version\": \"8.2.1.21612\"}, {\"status\": \"affected\", \"version\": \"8.2.1.21650\"}, {\"status\": \"affected\", \"version\": \"7.5.15.21611\"}, {\"status\": \"affected\", \"version\": \"7.5.17.21680\"}, {\"status\": \"affected\", \"version\": \"8.2.3.30119\"}, {\"status\": \"affected\", \"version\": \"8.2.4.30130\"}, {\"status\": \"affected\", \"version\": \"8.4.0\"}, {\"status\": \"affected\", \"version\": \"7.5.19\"}, {\"status\": \"affected\", \"version\": \"8.4.1.30298\"}, {\"status\": \"affected\", \"version\": \"8.4.2.30317\"}, {\"status\": \"affected\", \"version\": \"8.4.1.30307\"}, {\"status\": \"affected\", \"version\": \"7.5.20\"}, {\"status\": \"affected\", \"version\": \"8.4.3\"}, {\"status\": \"affected\", \"version\": \"8.4.4.30419\"}, {\"status\": \"affected\", \"version\": \"8.4.4.30467\"}, {\"status\": \"affected\", \"version\": \"7.5.21.21732\"}, {\"status\": \"affected\", \"version\": \"8.4.5.30483\"}], \"defaultStatus\": \"unknown\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ\", \"name\": \"cisco-sa-clamav-css-Fn4QSZ\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\\r\\n\\r\\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-248\", \"description\": \"Uncaught Exception\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2026-03-04T17:44:55.869Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-20031\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-05T15:52:07.708Z\", \"dateReserved\": \"2025-10-08T11:59:15.353Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2026-03-04T17:17:33.372Z\", \"assignerShortName\": \"cisco\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0241

Vulnerability from certfr_avis - Published: 2026-03-05 - Updated: 2026-03-05

Une vulnérabilité a été découverte dans ClamAV. Elle permet à un attaquant de provoquer un déni de service.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	ClamAV	ClamAV	ClamAV versions postérieures à 1.1.0 et antérieures à 1.4.4 ou 1.5.2

References

Title

Publication Time

CISCO-SA-CLAMAV-CSS-FN4QSZ

Vulnerability from csaf_cisco - Published: 2026-03-04 16:00 - Updated: 2026-03-04 16:00

Summary

ClamAV Cascading Style Sheets Image Parsing Error Handling Denial of Service Vulnerability

Notes

Summary: A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Affected Products: The Vulnerable Products section of this advisory includes Cisco bug IDs for each affected product. The bugs are accessible through the Cisco Bug Search Tool and contain additional platform-specific information, including workarounds (if available) and fixed software releases.

Vulnerable Products: The following table lists Cisco products that are affected by the vulnerability that is described in this advisory. Customers should refer to the associated Cisco bug IDs for further details. Affected Cisco Software Platform CVSS Base Score Security Impact Rating Cisco Bug ID First Fixed Release Secure Endpoint Connector for Linux CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Medium CSCwr70252 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr70252"] 1.28.1 Secure Endpoint Connector for Mac CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Medium CSCwr70255 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr70255"] 1.27.2 Secure Endpoint Connector for Windows CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Medium CSCwr70268 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr70268"] 8.6.0 Secure Endpoint Private Cloud CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Medium CSCwr70257 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr70257"] 4.2.7 or earlier with updated connectors Cisco products may be impacted differently depending on implementation and usage of ClamAV. For information on the effects of this vulnerability on specific Cisco products, see the Details ["#details"] section of this advisory.

Products Confirmed Not Vulnerable: Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by this vulnerability. Cisco has confirmed that these vulnerabilities do not affect the following Cisco products: Secure Email Gateway Secure Web Appliance

Details: Impacts of ClamAV DoS Vulnerability on Affected Platforms This vulnerability, which has a Medium Security Impact Rating (SIR), affects Linux, Mac, and Windows-based platforms. Exploitation of the vulnerability could cause the scanning process to crash, delaying or preventing further scanning operations. However, overall system stability is not affected. See the Security Risk Assessment ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#SecurityRiskAssessment"] section of the Cisco Security Vulnerability Policy for information about vulnerability scoring and SIRs. Cisco Secure Endpoint Connector, which is distributed from Cisco Secure Endpoint Private Cloud, is affected by this vulnerability. Cisco Secure Endpoint Private Cloud is not affected.

Workarounds: There are no workarounds that address this vulnerability.

Fixed Software: Cisco considers any workarounds and mitigations (if applicable) to be temporary solutions until an upgrade to a fixed software release is available. To fully remediate this vulnerability and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory. Fixed Releases At the time of publication, the release information in the following table was accurate. See the Details section in the bug ID(s) at the top of this advisory for the most complete and current information. The left column lists Cisco platforms, and the right column lists the first software release that included the fix for this vulnerability. Affected Cisco Software Platform First Fixed Release Secure Endpoint Connector for Linux 1.28.11 Secure Endpoint Connector for Mac 1.27.21 Secure Endpoint Connector for Windows 8.6.01 Secure Endpoint Private Cloud 4.2.7 or earlier with updated connectors2 1. Updated releases of Cisco Secure Endpoint Connector are available through the Cisco Secure Endpoint portal. Depending on the configured policy, Cisco Secure Endpoint Connector will automatically update. 2. Affected releases of Cisco Secure Endpoint Connector clients for Cisco Secure Endpoint Private Cloud have been updated in the connector repository. Customers will get these connector updates through normal content update processes. The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.

Vulnerability Policy: To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.

Exploitation and Public Announcements: The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Source: This vulnerability was found during internal security testing.

Legal Disclaimer: SOFTWARE DOWNLOADS AND TECHNICAL SUPPORT The Cisco Support and Downloads ["https://www.cisco.com/c/en/us/support/index.html"] page on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. Please note that customers may download only software that was procured from Cisco directly or through a Cisco authorized reseller or partner and for which the license is still valid. Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC) ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"]. Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade. When considering software upgrades ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"], customers are advised to regularly consult the advisories ["https://www.cisco.com/go/psirt"] for the relevant Cisco products to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"] or their contracted maintenance providers. LEGAL DISCLAIMER DETAILS CISCO DOES NOT MAKE ANY EXPRESS OR IMPLIED GUARANTEES OR WARRANTIES OF ANY KIND, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, CISCO DOES NOT GUARANTEE THE ACCURACY OR COMPLETENESS OF THIS INFORMATION. THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME. Copies or summaries of the information contained in this Security Advisory may lack important information or contain factual errors. Customers are advised to visit the Cisco Security Advisories ["https://www.cisco.com/go/psirt"] page for the most recent version of this Security Advisory. The Cisco Product Security Incident Response Team (PSIRT) assesses only the affected and fixed release information that is documented in this advisory. See the Cisco Security Vulnerability Policy ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"] for more information.

CVE-2026-20031

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Cisco Secure Endpoint Cisco		—	Vendor Fix fix
Cisco Secure Endpoint Private Cloud Console Cisco		—	Vendor Fix fix

References

12 references

URL	Category
https://sec.cloudapps.cisco.com/security/center/c…	self
https://sec.cloudapps.cisco.com/security/center/r…	external
https://bst.cloudapps.cisco.com/bugsearch/bug/CSC…	external
https://bst.cloudapps.cisco.com/bugsearch/bug/CSC…	external
https://bst.cloudapps.cisco.com/bugsearch/bug/CSC…	external
https://bst.cloudapps.cisco.com/bugsearch/bug/CSC…	external
https://sec.cloudapps.cisco.com/security/center/r…	external
http://www.cisco.com/web/about/security/psirt/sec…	external
https://www.cisco.com/c/en/us/support/index.html	external
https://www.cisco.com/c/en/us/support/web/tsd-cis…	external
https://sec.cloudapps.cisco.com/security/center/r…	external
https://www.cisco.com/go/psirt	external

Acknowledgments

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "summary": "This vulnerability was found during internal security testing."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "notes": [
      {
        "category": "summary",
        "text": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\n",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "The Vulnerable Products section of this advisory includes Cisco bug IDs for each affected product. The bugs are accessible through the Cisco Bug Search Tool and contain additional platform-specific information, including workarounds (if available) and fixed software releases.",
        "title": "Affected Products"
      },
      {
        "category": "general",
        "text": "The following table lists Cisco products that are affected by the vulnerability that is described in this advisory. Customers should refer to the associated Cisco bug IDs for further details.\r\n        Affected Cisco Software Platform  CVSS Base Score  Security Impact Rating  Cisco Bug ID  First Fixed Release          Secure Endpoint Connector for Linux  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L  Medium  CSCwr70252 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr70252\"]  1.28.1      Secure Endpoint Connector for Mac  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L  Medium  CSCwr70255 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr70255\"]  1.27.2      Secure Endpoint Connector for Windows  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L  Medium  CSCwr70268 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr70268\"]  8.6.0      Secure Endpoint Private Cloud  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L  Medium  CSCwr70257 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr70257\"]  4.2.7 or earlier with updated connectors\r\nCisco products may be impacted differently depending on implementation and usage of ClamAV. For information on the effects of this vulnerability on specific Cisco products, see the Details [\"#details\"] section of this advisory.",
        "title": "Vulnerable Products"
      },
      {
        "category": "general",
        "text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that these vulnerabilities do not affect the following Cisco products:\r\n\r\nSecure Email Gateway\r\nSecure Web Appliance",
        "title": "Products Confirmed Not Vulnerable"
      },
      {
        "category": "general",
        "text": "Impacts of ClamAV DoS Vulnerability on Affected Platforms\r\n\r\nThis vulnerability, which has a Medium Security Impact Rating (SIR), affects Linux, Mac, and Windows-based platforms. Exploitation of the vulnerability could cause the scanning process to crash, delaying or preventing further scanning operations. However, overall system stability is not affected. See the Security Risk Assessment [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#SecurityRiskAssessment\"] section of the Cisco Security Vulnerability Policy for information about vulnerability scoring and SIRs.\r\n\r\nCisco Secure Endpoint Connector, which is distributed from Cisco Secure Endpoint Private Cloud, is affected by this vulnerability. Cisco Secure Endpoint Private Cloud is not affected.",
        "title": "Details"
      },
      {
        "category": "general",
        "text": "There are no workarounds that address this vulnerability.",
        "title": "Workarounds"
      },
      {
        "category": "general",
        "text": "Cisco considers any workarounds and mitigations (if applicable) to be temporary solutions until an upgrade to a fixed software release is available. To fully remediate this vulnerability and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.\r\n      Fixed Releases\r\nAt the time of publication, the release information in the following table was accurate. See the Details section in the bug ID(s) at the top of this advisory for the most complete and current information.\r\n\r\nThe left column lists Cisco platforms, and the right column lists the first software release that included the fix for this vulnerability.\r\n        Affected Cisco Software Platform  First Fixed Release          Secure Endpoint Connector for Linux  1.28.11      Secure Endpoint Connector for Mac  1.27.21      Secure Endpoint Connector for Windows  8.6.01      Secure Endpoint Private Cloud  4.2.7 or earlier with updated connectors2\r\n1. Updated releases of Cisco Secure Endpoint Connector are available through the Cisco Secure Endpoint portal. Depending on the configured policy, Cisco Secure Endpoint Connector will automatically update.\r\n2. Affected releases of Cisco Secure Endpoint Connector clients for Cisco Secure Endpoint Private Cloud have been updated in the connector repository. Customers will get these connector updates through normal content update processes.\r\nThe Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.",
        "title": "Fixed Software"
      },
      {
        "category": "general",
        "text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
        "title": "Vulnerability Policy"
      },
      {
        "category": "general",
        "text": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
        "title": "Exploitation and Public Announcements"
      },
      {
        "category": "general",
        "text": "This vulnerability was found during internal security testing.",
        "title": "Source"
      },
      {
        "category": "legal_disclaimer",
        "text": "SOFTWARE DOWNLOADS AND TECHNICAL SUPPORT\r\n\r\nThe Cisco Support and Downloads [\"https://www.cisco.com/c/en/us/support/index.html\"] page on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. Please note that customers may download only software that was procured from Cisco directly or through a Cisco authorized reseller or partner and for which the license is still valid.\r\n\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC) [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]. Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n\r\nWhen considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories [\"https://www.cisco.com/go/psirt\"] for the relevant Cisco products to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"] or their contracted maintenance providers.\r\n    LEGAL DISCLAIMER DETAILS\r\n\r\nCISCO DOES NOT MAKE ANY EXPRESS OR IMPLIED GUARANTEES OR WARRANTIES OF ANY KIND, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, CISCO DOES NOT GUARANTEE THE ACCURACY OR COMPLETENESS OF THIS INFORMATION. THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nCopies or summaries of the information contained in this Security Advisory may lack important information or contain factual errors. Customers are advised to visit the Cisco Security Advisories [\"https://www.cisco.com/go/psirt\"] page for the most recent version of this Security Advisory. The Cisco Product Security Incident Response Team (PSIRT) assesses only the affected and fixed release information that is documented in this advisory. See the Cisco Security Vulnerability Policy [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"] for more information.",
        "title": "Legal Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@cisco.com",
      "issuing_authority": "Cisco PSIRT",
      "name": "Cisco",
      "namespace": "https://wwww.cisco.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "ClamAV Cascading Style Sheets Image Parsing Error Handling Denial of Service Vulnerability",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ"
      },
      {
        "category": "external",
        "summary": "Cisco Security Vulnerability Policy",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
      },
      {
        "category": "external",
        "summary": "CSCwr70252",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr70252"
      },
      {
        "category": "external",
        "summary": "CSCwr70255",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr70255"
      },
      {
        "category": "external",
        "summary": "CSCwr70268",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr70268"
      },
      {
        "category": "external",
        "summary": "CSCwr70257",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr70257"
      },
      {
        "category": "external",
        "summary": "Security Risk Assessment",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#SecurityRiskAssessment"
      },
      {
        "category": "external",
        "summary": "Security Vulnerability Policy",
        "url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"
      },
      {
        "category": "external",
        "summary": "Cisco Support and Downloads",
        "url": "https://www.cisco.com/c/en/us/support/index.html"
      },
      {
        "category": "external",
        "summary": "Cisco Technical Assistance Center (TAC)",
        "url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
      },
      {
        "category": "external",
        "summary": "considering software upgrades",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"
      },
      {
        "category": "external",
        "summary": "the advisories",
        "url": "https://www.cisco.com/go/psirt"
      }
    ],
    "title": "ClamAV Cascading Style Sheets Image Parsing Error Handling Denial of Service Vulnerability",
    "tracking": {
      "current_release_date": "2026-03-04T16:00:00+00:00",
      "generator": {
        "date": "2026-03-04T16:10:08+00:00",
        "engine": {
          "name": "TVCE"
        }
      },
      "id": "cisco-sa-clamav-css-Fn4QSZ",
      "initial_release_date": "2026-03-04T16:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-03-04T16:09:36+00:00",
          "number": "1.0.0",
          "summary": "Initial public release."
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_family",
            "name": "Cisco Secure Endpoint",
            "product": {
              "name": "Cisco Secure Endpoint ",
              "product_id": "CSAFPID-221075"
            }
          },
          {
            "category": "product_family",
            "name": "Cisco Secure Endpoint Private Cloud Console",
            "product": {
              "name": "Cisco Secure Endpoint Private Cloud Console ",
              "product_id": "CSAFPID-292710"
            }
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-20031",
      "ids": [
        {
          "system_name": "Cisco Bug ID",
          "text": "CSCwr70268"
        },
        {
          "system_name": "Cisco Bug ID",
          "text": "CSCwr70255"
        },
        {
          "system_name": "Cisco Bug ID",
          "text": "CSCwr70252"
        },
        {
          "system_name": "Cisco Bug ID",
          "text": "CSCwr70257"
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Complete.",
          "title": "Affected Product Comprehensiveness"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-221075",
          "CSAFPID-292710"
        ]
      },
      "release_date": "2026-03-04T16:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Cisco has released software updates that address this vulnerability.",
          "product_ids": [
            "CSAFPID-292710",
            "CSAFPID-221075"
          ],
          "url": "https://software.cisco.com"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-221075",
            "CSAFPID-292710"
          ]
        }
      ],
      "title": "ClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability"
    }
  ]
}

FKIE_CVE-2026-20031

Vulnerability from fkie_nvd - Published: 2026-03-04 18:16 - Updated: 2026-06-17 10:16

Severity

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Summary

References

	URL	Tags
	psirt@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Endpoint",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "6.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.3"
            },
            {
              "status": "affected",
              "version": "7.2.13"
            },
            {
              "status": "affected",
              "version": "6.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.9"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "6.1.7"
            },
            {
              "status": "affected",
              "version": "7.2.11"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.1.5"
            },
            {
              "status": "affected",
              "version": "6.3.3"
            },
            {
              "status": "affected",
              "version": "7.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.1.9"
            },
            {
              "status": "affected",
              "version": "6.0.9"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "6.0.7"
            },
            {
              "status": "affected",
              "version": "6.3.7"
            },
            {
              "status": "affected",
              "version": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.8.0"
            },
            {
              "status": "affected",
              "version": "1.11.1"
            },
            {
              "status": "affected",
              "version": "1.12.4"
            },
            {
              "status": "affected",
              "version": "1.10.0"
            },
            {
              "status": "affected",
              "version": "1.12.0"
            },
            {
              "status": "affected",
              "version": "1.8.1"
            },
            {
              "status": "affected",
              "version": "1.10.1"
            },
            {
              "status": "affected",
              "version": "1.12.1"
            },
            {
              "status": "affected",
              "version": "1.12.6"
            },
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.10.2"
            },
            {
              "status": "affected",
              "version": "1.12.7"
            },
            {
              "status": "affected",
              "version": "1.12.2"
            },
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.9.0"
            },
            {
              "status": "affected",
              "version": "1.11.0"
            },
            {
              "status": "affected",
              "version": "1.7.0"
            },
            {
              "status": "affected",
              "version": "1.13.0"
            },
            {
              "status": "affected",
              "version": "1.8.4"
            },
            {
              "status": "affected",
              "version": "1.13.1"
            },
            {
              "status": "affected",
              "version": "1.9.1"
            },
            {
              "status": "affected",
              "version": "1.12.5"
            },
            {
              "status": "affected",
              "version": "1.13.2"
            },
            {
              "status": "affected",
              "version": "2.0.2"
            },
            {
              "status": "affected",
              "version": "1.1.0"
            },
            {
              "status": "affected",
              "version": "2.0.0"
            },
            {
              "status": "affected",
              "version": "2.0.1"
            },
            {
              "status": "affected",
              "version": "8.1.7.21512"
            },
            {
              "status": "affected",
              "version": "8.1.7"
            },
            {
              "status": "affected",
              "version": "8.1.5"
            },
            {
              "status": "affected",
              "version": "8.1.3.21242"
            },
            {
              "status": "affected",
              "version": "8.1.3"
            },
            {
              "status": "affected",
              "version": "8.1.5.21322"
            },
            {
              "status": "affected",
              "version": "8.1.7.21417"
            },
            {
              "status": "affected",
              "version": "2.1.0.14"
            },
            {
              "status": "affected",
              "version": "2.2.0"
            },
            {
              "status": "affected",
              "version": "2.3.0"
            },
            {
              "status": "affected",
              "version": "2.4.0"
            },
            {
              "status": "affected",
              "version": "2.5.0"
            },
            {
              "status": "affected",
              "version": "2.6.0"
            },
            {
              "status": "affected",
              "version": "2.7.0"
            },
            {
              "status": "affected",
              "version": "2.8.0"
            },
            {
              "status": "affected",
              "version": "2.9.0"
            },
            {
              "status": "affected",
              "version": "2.10.0"
            },
            {
              "status": "affected",
              "version": "2.10.1"
            },
            {
              "status": "affected",
              "version": "2.11.0"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.15.1"
            },
            {
              "status": "affected",
              "version": "1.15.2"
            },
            {
              "status": "affected",
              "version": "1.15.3"
            },
            {
              "status": "affected",
              "version": "1.15.4"
            },
            {
              "status": "affected",
              "version": "1.15.5"
            },
            {
              "status": "affected",
              "version": "1.15.6"
            },
            {
              "status": "affected",
              "version": "1.16.0"
            },
            {
              "status": "affected",
              "version": "1.16.1"
            },
            {
              "status": "affected",
              "version": "1.16.2"
            },
            {
              "status": "affected",
              "version": "1.16.3"
            },
            {
              "status": "affected",
              "version": "1.18.0"
            },
            {
              "status": "affected",
              "version": "1.18.1"
            },
            {
              "status": "affected",
              "version": "1.20.0"
            },
            {
              "status": "affected",
              "version": "1.21.0"
            },
            {
              "status": "affected",
              "version": "1.21.1"
            },
            {
              "status": "affected",
              "version": "1.21.2"
            },
            {
              "status": "affected",
              "version": "1.21.3"
            },
            {
              "status": "affected",
              "version": "1.22.0"
            },
            {
              "status": "affected",
              "version": "1.22.1"
            },
            {
              "status": "affected",
              "version": "1.22.2"
            },
            {
              "status": "affected",
              "version": "1.22.3"
            },
            {
              "status": "affected",
              "version": "1.22.4"
            },
            {
              "status": "affected",
              "version": "1.24.0"
            },
            {
              "status": "affected",
              "version": "1.24.1"
            },
            {
              "status": "affected",
              "version": "1.24.2"
            },
            {
              "status": "affected",
              "version": "1.24.3"
            },
            {
              "status": "affected",
              "version": "1.24.4"
            },
            {
              "status": "affected",
              "version": "1.26.0"
            },
            {
              "status": "affected",
              "version": "1.24.5"
            },
            {
              "status": "affected",
              "version": "1.26.1"
            },
            {
              "status": "affected",
              "version": "1.27.0"
            },
            {
              "status": "affected",
              "version": "1.15.0"
            },
            {
              "status": "affected",
              "version": "1.17.0"
            },
            {
              "status": "affected",
              "version": "1.17.1"
            },
            {
              "status": "affected",
              "version": "1.17.2"
            },
            {
              "status": "affected",
              "version": "1.19.0"
            },
            {
              "status": "affected",
              "version": "1.20.1"
            },
            {
              "status": "affected",
              "version": "1.20.2"
            },
            {
              "status": "affected",
              "version": "1.20.3"
            },
            {
              "status": "affected",
              "version": "1.20.4"
            },
            {
              "status": "affected",
              "version": "1.20.5"
            },
            {
              "status": "affected",
              "version": "1.20.6"
            },
            {
              "status": "affected",
              "version": "1.23.0"
            },
            {
              "status": "affected",
              "version": "1.23.1"
            },
            {
              "status": "affected",
              "version": "1.20.7"
            },
            {
              "status": "affected",
              "version": "1.20.8"
            },
            {
              "status": "affected",
              "version": "1.25.0"
            },
            {
              "status": "affected",
              "version": "1.25.1"
            },
            {
              "status": "affected",
              "version": "1.25.2"
            },
            {
              "status": "affected",
              "version": "1.27.1"
            },
            {
              "status": "affected",
              "version": "1.27.2"
            },
            {
              "status": "affected",
              "version": "7.3.13"
            },
            {
              "status": "affected",
              "version": "7.3.15"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.20425"
            },
            {
              "status": "affected",
              "version": "7.4.1.20439"
            },
            {
              "status": "affected",
              "version": "7.4.3"
            },
            {
              "status": "affected",
              "version": "7.4.3.20679"
            },
            {
              "status": "affected",
              "version": "7.4.5"
            },
            {
              "status": "affected",
              "version": "7.5.1.20813"
            },
            {
              "status": "affected",
              "version": "7.5.1.20833"
            },
            {
              "status": "affected",
              "version": "7.5.3"
            },
            {
              "status": "affected",
              "version": "7.5.5"
            },
            {
              "status": "affected",
              "version": "8.0.1.21160"
            },
            {
              "status": "affected",
              "version": "8.0.1.21164"
            },
            {
              "status": "affected",
              "version": "7.5.7"
            },
            {
              "status": "affected",
              "version": "7.5.9"
            },
            {
              "status": "affected",
              "version": "7.5.11"
            },
            {
              "status": "affected",
              "version": "8.1.7.21585"
            },
            {
              "status": "affected",
              "version": "7.5.13.21586"
            },
            {
              "status": "affected",
              "version": "7.5.13.21598"
            },
            {
              "status": "affected",
              "version": "8.2.1.21612"
            },
            {
              "status": "affected",
              "version": "8.2.1.21650"
            },
            {
              "status": "affected",
              "version": "7.5.15.21611"
            },
            {
              "status": "affected",
              "version": "7.5.17.21680"
            },
            {
              "status": "affected",
              "version": "8.2.3.30119"
            },
            {
              "status": "affected",
              "version": "8.2.4.30130"
            },
            {
              "status": "affected",
              "version": "8.4.0"
            },
            {
              "status": "affected",
              "version": "7.5.19"
            },
            {
              "status": "affected",
              "version": "8.4.1.30298"
            },
            {
              "status": "affected",
              "version": "8.4.2.30317"
            },
            {
              "status": "affected",
              "version": "8.4.1.30307"
            },
            {
              "status": "affected",
              "version": "7.5.20"
            },
            {
              "status": "affected",
              "version": "8.4.3"
            },
            {
              "status": "affected",
              "version": "8.4.4.30419"
            },
            {
              "status": "affected",
              "version": "8.4.4.30467"
            },
            {
              "status": "affected",
              "version": "7.5.21.21732"
            },
            {
              "status": "affected",
              "version": "8.4.5.30483"
            }
          ]
        }
      ],
      "source": "psirt@cisco.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en el m\u00f3dulo HTML Cascading Style Sheets (CSS) de ClamAV podr\u00eda permitir a un atacante remoto no autenticado causar una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a un manejo de errores inadecuado al dividir cadenas UTF-8. Un atacante podr\u00eda explotar esta vulnerabilidad al enviar un archivo HTML manipulado para ser escaneado por ClamAV en un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante terminar el proceso de escaneo."
    }
  ],
  "id": "CVE-2026-20031",
  "lastModified": "2026-06-17T10:16:56.607",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "psirt@cisco.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-20031",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-03-05T15:51:58.298217Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-03-04T18:16:16.773",
  "references": [
    {
      "source": "psirt@cisco.com",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Undergoing Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-248"
        }
      ],
      "source": "psirt@cisco.com",
      "type": "Secondary"
    }
  ]
}

GHSA-HVPM-HV6G-6M5C

Vulnerability from github – Published: 2026-03-04 18:31 – Updated: 2026-03-04 18:31

Details

A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.

Severity

5.3 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-20031"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-248"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-03-04T18:16:16Z",
    "severity": "MODERATE"
  },
  "details": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\n\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.",
  "id": "GHSA-hvpm-hv6g-6m5c",
  "modified": "2026-03-04T18:31:54Z",
  "published": "2026-03-04T18:31:54Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20031"
    },
    {
      "type": "WEB",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2026-0077

Vulnerability from csaf_ncscnl - Published: 2026-03-05 09:05 - Updated: 2026-03-05 09:05

Summary

Kwetsbaarheden verholpen in Cisco Secure Firewall systemen

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Firewall (inclusief ASA en FTD software).

Interpretaties: De kwetsbaarheden omvatten SQL-injectie, privilege-escalatie, denial-of-service, cross-site scripting, en onjuist beheer van invoer in verschillende componenten van de Cisco Secure Firewall. Authenticated remote attackers kunnen deze kwetsbaarheden misbruiken om ongeautoriseerde toegang te krijgen, systeemintegriteit te compromitteren, of netwerkdiensten te verstoren. De kwetsbaarheden zijn aanwezig in de webinterfaces, REST API's, en andere functionaliteiten van de firewall software.

Oplossingen: Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-20: Improper Input Validation

CWE-27: Path Traversal: 'dir/../../filename'

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-131: Incorrect Calculation of Buffer Size

CWE-138: Improper Neutralization of Special Elements

CWE-190: Integer Overflow or Wraparound

CWE-244: Improper Clearing of Heap Memory Before Release ('Heap Inspection')

CWE-248: Uncaught Exception

CWE-250: Execution with Unnecessary Privileges

CWE-269: Improper Privilege Management

CWE-279: Incorrect Execution-Assigned Permissions

CWE-284: Improper Access Control

CWE-330: Use of Insufficiently Random Values

CWE-388: CWE-388

CWE-401: Missing Release of Memory after Effective Lifetime

CWE-404: Improper Resource Shutdown or Release

CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

CWE-476: NULL Pointer Dereference

CWE-770: Allocation of Resources Without Limits or Throttling

CWE-772: Missing Release of Resource after Effective Lifetime

CWE-787: Out-of-bounds Write

CWE-788: Access of Memory Location After End of Buffer

CWE-823: Use of Out-of-range Pointer Offset

CVE-2024-20340

Multiple vulnerabilities in Cisco products, including an SQL injection flaw in Cisco Secure Firewall Management Center, allow authenticated users or remote attackers to perform actions such as SQL injection, denial of service, privilege escalation, remote code execution, and information disclosure.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2024-20358

A vulnerability in Cisco ASA and Firepower Threat Defense restore functionality allows an authenticated local attacker with administrator privileges to execute arbitrary root-level commands by restoring a crafted backup file due to improper sanitization.

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20101

Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software, including in the SAML 2.0 SSO and Remote Access SSL VPN features, allow unauthenticated remote attackers to cause device reloads and denial of service via crafted messages.

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-330 - Use of Insufficiently Random Values

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20020

A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an unauthenticated adjacent attacker to cause device reload and denial of service by sending crafted OSPF update packets, requiring the secret key if OSPF authentication is enabled.

6.8 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20073

A vulnerability in Cisco Secure Firewall ASA and FTD software allows unauthenticated remote attackers to bypass access controls by exploiting improper error handling during memory exhaustion in cluster replication, enabling unauthorized network traffic.

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

CWE-284 - Improper Access Control

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20007

A logic error in Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to bypass Snort rules and send unauthorized network traffic.

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

CWE-284 - Improper Access Control

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20018

A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center and Threat Defense Software allows an authenticated remote attacker with admin privileges to write arbitrary root files on the operating system by exploiting insufficient directory path validation during file synchronization.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

CWE-27 - Path Traversal: 'dir/../../filename'

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20002

Multiple SQL injection vulnerabilities in Cisco Secure FMC Software and Cisco Secure Firewall Management Center's web interfaces and REST APIs allow authenticated remote attackers to access databases and certain OS files.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20015

A memory leak vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to cause a denial-of-service condition, disrupting network availability and requiring manual device reload.

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20062

A vulnerability in Cisco Secure Firewall ASA Software's CLI allows an authenticated admin user in one context to copy files, including sensitive configurations, to or from another context due to improper SCP access controls requiring valid credentials and exact file paths.

7.2 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE-279 - Incorrect Execution-Assigned Permissions

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20031

A vulnerability in ClamAV's CSS module allows unauthenticated remote attackers to cause a denial of service by exploiting improper UTF-8 string error handling.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-248 - Uncaught Exception

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20039

A vulnerability in Cisco Secure Firewall ASA and FTD VPN web server allows unauthenticated remote attackers to cause denial of service by sending crafted HTTP requests, resulting in device reloads.

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-244 - Improper Clearing of Heap Memory Before Release ('Heap Inspection')

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20022

A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an unauthenticated adjacent attacker to cause device reloads and denial of service when OSPF canonicalization debug is enabled due to insufficient input validation of OSPF LSU packets.

6.1 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-823 - Use of Out-of-range Pointer Offset

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20050

A vulnerability in Cisco Secure Firewall Threat Defense Software's Do Not Decrypt exclusion feature allows an unauthenticated remote attacker to cause denial of service by sending crafted TLS 1.2 encrypted traffic, resulting in device reloads.

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-404 - Improper Resource Shutdown or Release

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20069

A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services enables unauthenticated remote attackers to conduct browser-based cross-site scripting attacks by exploiting improper HTTP request validation.

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20009

A vulnerability in Cisco Secure Firewall ASA's SSH key-based authentication allows an unauthenticated remote attacker with a valid username and public key to log in and execute commands as that user without the private key, excluding root access.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-138 - Improper Neutralization of Special Elements

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20014

A vulnerability in Cisco Secure Firewall ASA and FTD Software's IKEv2 feature allows authenticated remote attackers with valid VPN credentials to cause denial-of-service by sending crafted packets that may exhaust memory and trigger device reloads.

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20016

Multiple vulnerabilities in Cisco FXOS, Secure Firewall ASA, and FTD Software CLI features allow authenticated local attackers with administrative credentials to execute arbitrary commands with root or elevated privileges or cause device reloads due to insufficient input validation.

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE-250 - Execution with Unnecessary Privileges

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20021

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD software allows an authenticated, adjacent attacker to send crafted packets that exhaust device memory, causing a denial of service.

4.3 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20049

A vulnerability in Cisco Secure Firewall ASA and FTD software's handling of GCM-encrypted IKEv2 IPsec traffic allows an authenticated attacker with VPN credentials to cause a denial of service by triggering an unexpected device reload due to insufficient memory allocation.

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20105

Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow authenticated remote attackers to exhaust device memory, causing denial of service or device reloads.

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20025

A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause device reload and denial of service via crafted OSPF LSU packets exploiting insufficient input validation.

6.8 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20082

A vulnerability in Cisco Secure Firewall ASA Software's handling of embryonic connection limits during TCP SYN flood attacks can cause legitimate TCP SYN packets to be dropped, resulting in denial of service.

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20006

A vulnerability in the TLS cryptography of the Snort 3 Detection Engine in Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to cause unexpected restarts and denial of service, with TLS 1.3 unaffected.

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CWE-388 - -

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20103

Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow unauthenticated remote attackers to exhaust device memory, causing denial of service and potentially making the web interface unresponsive.

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20008

A vulnerability in Cisco Secure Firewall ASA and FTD CLI commands allows an authenticated local attacker with Administrator credentials to execute arbitrary Lua code as root due to improper input sanitization.

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20063

Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE-250 - Execution with Unnecessary Privileges

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20106

Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD software's Remote Access SSL VPN, HTTP management, and MUS functionality allow unauthenticated remote attackers to exhaust device memory, causing denial of service and requiring manual reboot.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20017

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE-250 - Execution with Unnecessary Privileges

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20100

Multiple vulnerabilities in the Remote Access SSL VPN feature of Cisco Secure Firewall ASA and FTD, including a LUA interpreter flaw, allow authenticated remote attackers to cause device reloads and denial of service.

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20044

A vulnerability in Cisco Secure Firewall Management Center allows an authenticated local attacker with administrative credentials to execute arbitrary root commands by exploiting insufficient restrictions on remediation modules in lockdown mode.

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE-269 - Improper Privilege Management

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20024

A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause heap corruption via crafted packets, resulting in device reloads and denial-of-service.

6.8 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20064

Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software allow authenticated local attackers with low privileges to cause device reloads or execute commands with elevated privileges, resulting in denial of service or privilege escalation.

6.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-250 - Execution with Unnecessary Privileges

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20023

A vulnerability in Cisco ASA and FTD software's OSPF protocol allows an unauthenticated adjacent attacker to cause memory corruption and denial of service by sending crafted OSPF packets.

6.1 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20003

Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and OS files.

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20102

A reflected cross-site scripting (XSS) vulnerability in the SAML 2.0 SSO feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to exploit insufficient input validation of HTTP parameters.

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20013

A vulnerability in Cisco Secure Firewall ASA and FTD Software's IKEv2 feature allows unauthenticated remote attackers to cause denial-of-service by exhausting memory with crafted packets, potentially requiring manual device reload.

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20070

A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services allows unauthenticated remote attackers to perform cross-site scripting (XSS) via improper input validation in HTTP requests, potentially enabling arbitrary code execution in users' browsers.

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-80 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20001

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

CVE-2026-20052

A logic error in memory management during Snort 3 SSL packet inspection in Cisco Secure Firewall Threat Defense Software can allow an unauthenticated remote attacker to cause the Snort 3 Detection Engine to restart, resulting in a denial of service.

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CWE-788 - Access of Memory Location After End of Buffer

Affected products

Known affected 17 products

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Adaptive Security Appliance		vers:unknown/*
vers:unknown/* Cisco / Cisco 3000 Series Industrial Security Appliances (ISA)		vers:unknown/*
vers:unknown/* Cisco / Cisco ASA 5500-X Series Firewalls		vers:unknown/*
vers:unknown/* Cisco / Cisco Adaptive Security Virtual Appliance (ASAv)		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 1000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 2100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Firepower 9000 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Endpoint		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 3100 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall 4200 Series		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC)		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Management Center (FMC) Appliances		vers:unknown/*
vers:unknown/* Cisco / Cisco Secure Firewall Threat Defense (FTD) Software		vers:unknown/*
vers:unknown/* Cisco / Firepower Management Center		vers:unknown/*
vers:unknown/* Cisco / Firepower Threat Defense		vers:unknown/*

References

66 references

URL	Category
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Firewall (inclusief ASA en FTD software).",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden omvatten SQL-injectie, privilege-escalatie, denial-of-service, cross-site scripting, en onjuist beheer van invoer in verschillende componenten van de Cisco Secure Firewall. Authenticated remote attackers kunnen deze kwetsbaarheden misbruiken om ongeautoriseerde toegang te krijgen, systeemintegriteit te compromitteren, of netwerkdiensten te verstoren. De kwetsbaarheden zijn aanwezig in de webinterfaces, REST API\u0027s, en andere functionaliteiten van de firewall software.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Path Traversal: \u0027dir/../../filename\u0027",
        "title": "CWE-27"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
        "title": "CWE-77"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
        "title": "CWE-78"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
        "title": "CWE-79"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
        "title": "CWE-80"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
        "title": "CWE-88"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
        "title": "CWE-89"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
        "title": "CWE-120"
      },
      {
        "category": "general",
        "text": "Incorrect Calculation of Buffer Size",
        "title": "CWE-131"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements",
        "title": "CWE-138"
      },
      {
        "category": "general",
        "text": "Integer Overflow or Wraparound",
        "title": "CWE-190"
      },
      {
        "category": "general",
        "text": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)",
        "title": "CWE-244"
      },
      {
        "category": "general",
        "text": "Uncaught Exception",
        "title": "CWE-248"
      },
      {
        "category": "general",
        "text": "Execution with Unnecessary Privileges",
        "title": "CWE-250"
      },
      {
        "category": "general",
        "text": "Improper Privilege Management",
        "title": "CWE-269"
      },
      {
        "category": "general",
        "text": "Incorrect Execution-Assigned Permissions",
        "title": "CWE-279"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Use of Insufficiently Random Values",
        "title": "CWE-330"
      },
      {
        "category": "general",
        "text": "CWE-388",
        "title": "CWE-388"
      },
      {
        "category": "general",
        "text": "Missing Release of Memory after Effective Lifetime",
        "title": "CWE-401"
      },
      {
        "category": "general",
        "text": "Improper Resource Shutdown or Release",
        "title": "CWE-404"
      },
      {
        "category": "general",
        "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
        "title": "CWE-444"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Allocation of Resources Without Limits or Throttling",
        "title": "CWE-770"
      },
      {
        "category": "general",
        "text": "Missing Release of Resource after Effective Lifetime",
        "title": "CWE-772"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Access of Memory Location After End of Buffer",
        "title": "CWE-788"
      },
      {
        "category": "general",
        "text": "Use of Out-of-range Pointer Offset",
        "title": "CWE-823"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-keybypass-cr5xPUSf"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-aclbypass-dos-CVxVRSvQ"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-desync-n5AVzEQw"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-luainject-VescqgmS"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort-bypass-rLggKzVF"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3ssl-FBEKYXpH"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-rHfqnwRg"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dir-trav-wERgjhWq"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Cisco Secure Firewall systemen",
    "tracking": {
      "current_release_date": "2026-03-05T09:05:21.646499Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0077",
      "initial_release_date": "2026-03-05T09:05:21.646499Z",
      "revision_history": [
        {
          "date": "2026-03-05T09:05:21.646499Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Adaptive Security Appliance"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco 3000 Series Industrial Security Appliances (ISA)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-3"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco ASA 5500-X Series Firewalls"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-4"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Adaptive Security Virtual Appliance (ASAv)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-5"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Firepower 1000 Series"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-6"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Firepower 2100 Series"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-7"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Firepower 9000 Series"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-8"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Secure Endpoint"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-9"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Secure Firewall 3100 Series"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-10"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Secure Firewall 4200 Series"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-11"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-12"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Secure Firewall Management Center"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-13"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Secure Firewall Management Center (FMC)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-14"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Secure Firewall Management Center (FMC) Appliances"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-15"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Secure Firewall Threat Defense (FTD) Software"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-16"
                }
              }
            ],
            "category": "product_name",
            "name": "Firepower Management Center"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-17"
                }
              }
            ],
            "category": "product_name",
            "name": "Firepower Threat Defense"
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-20340",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
          "title": "CWE-89"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in Cisco products, including an SQL injection flaw in Cisco Secure Firewall Management Center, allow authenticated users or remote attackers to perform actions such as SQL injection, denial of service, privilege escalation, remote code execution, and information disclosure.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-20340 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-20340.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2024-20340"
    },
    {
      "cve": "CVE-2024-20358",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "title": "CWE-78"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco ASA and Firepower Threat Defense restore functionality allows an authenticated local attacker with administrator privileges to execute arbitrary root-level commands by restoring a crafted backup file due to improper sanitization.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-20358 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-20358.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2024-20358"
    },
    {
      "cve": "CVE-2026-20101",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Insufficiently Random Values",
          "title": "CWE-330"
        },
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "other",
          "text": "Missing Release of Memory after Effective Lifetime",
          "title": "CWE-401"
        },
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software, including in the SAML 2.0 SSO and Remote Access SSL VPN features, allow unauthenticated remote attackers to cause device reloads and denial of service via crafted messages.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20101 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20101.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20101"
    },
    {
      "cve": "CVE-2026-20020",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an unauthenticated adjacent attacker to cause device reload and denial of service by sending crafted OSPF update packets, requiring the secret key if OSPF authentication is enabled.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20020 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20020.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20020"
    },
    {
      "cve": "CVE-2026-20073",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA and FTD software allows unauthenticated remote attackers to bypass access controls by exploiting improper error handling during memory exhaustion in cluster replication, enabling unauthorized network traffic.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20073 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20073.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20073"
    },
    {
      "cve": "CVE-2026-20007",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "description",
          "text": "A logic error in Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to bypass Snort rules and send unauthorized network traffic.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20007 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20007.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20007"
    },
    {
      "cve": "CVE-2026-20018",
      "cwe": {
        "id": "CWE-27",
        "name": "Path Traversal: \u0027dir/../../filename\u0027"
      },
      "notes": [
        {
          "category": "other",
          "text": "Path Traversal: \u0027dir/../../filename\u0027",
          "title": "CWE-27"
        },
        {
          "category": "description",
          "text": "A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center and Threat Defense Software allows an authenticated remote attacker with admin privileges to write arbitrary root files on the operating system by exploiting insufficient directory path validation during file synchronization.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20018 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20018.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20018"
    },
    {
      "cve": "CVE-2026-20002",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
          "title": "CWE-89"
        },
        {
          "category": "description",
          "text": "Multiple SQL injection vulnerabilities in Cisco Secure FMC Software and Cisco Secure Firewall Management Center\u0027s web interfaces and REST APIs allow authenticated remote attackers to access databases and certain OS files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20002 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20002.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20002"
    },
    {
      "cve": "CVE-2026-20015",
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Release of Memory after Effective Lifetime",
          "title": "CWE-401"
        },
        {
          "category": "description",
          "text": "A memory leak vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to cause a denial-of-service condition, disrupting network availability and requiring manual device reload.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20015 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20015.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20015"
    },
    {
      "cve": "CVE-2026-20062",
      "cwe": {
        "id": "CWE-279",
        "name": "Incorrect Execution-Assigned Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Execution-Assigned Permissions",
          "title": "CWE-279"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA Software\u0027s CLI allows an authenticated admin user in one context to copy files, including sensitive configurations, to or from another context due to improper SCP access controls requiring valid credentials and exact file paths.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20062 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20062.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20062"
    },
    {
      "cve": "CVE-2026-20031",
      "cwe": {
        "id": "CWE-248",
        "name": "Uncaught Exception"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncaught Exception",
          "title": "CWE-248"
        },
        {
          "category": "description",
          "text": "A vulnerability in ClamAV\u0027s CSS module allows unauthenticated remote attackers to cause a denial of service by exploiting improper UTF-8 string error handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20031 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20031.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20031"
    },
    {
      "cve": "CVE-2026-20039",
      "cwe": {
        "id": "CWE-244",
        "name": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)",
          "title": "CWE-244"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA and FTD VPN web server allows unauthenticated remote attackers to cause denial of service by sending crafted HTTP requests, resulting in device reloads.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20039 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20039.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20039"
    },
    {
      "cve": "CVE-2026-20022",
      "cwe": {
        "id": "CWE-823",
        "name": "Use of Out-of-range Pointer Offset"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Out-of-range Pointer Offset",
          "title": "CWE-823"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an unauthenticated adjacent attacker to cause device reloads and denial of service when OSPF canonicalization debug is enabled due to insufficient input validation of OSPF LSU packets.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20022 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20022.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20022"
    },
    {
      "cve": "CVE-2026-20050",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Resource Shutdown or Release",
          "title": "CWE-404"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall Threat Defense Software\u0027s Do Not Decrypt exclusion feature allows an unauthenticated remote attacker to cause denial of service by sending crafted TLS 1.2 encrypted traffic, resulting in device reloads.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20050 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20050.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20050"
    },
    {
      "cve": "CVE-2026-20069",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
          "title": "CWE-444"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services enables unauthenticated remote attackers to conduct browser-based cross-site scripting attacks by exploiting improper HTTP request validation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20069 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20069.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20069"
    },
    {
      "cve": "CVE-2026-20009",
      "cwe": {
        "id": "CWE-138",
        "name": "Improper Neutralization of Special Elements"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements",
          "title": "CWE-138"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA\u0027s SSH key-based authentication allows an unauthenticated remote attacker with a valid username and public key to log in and execute commands as that user without the private key, excluding root access.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20009 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20009.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20009"
    },
    {
      "cve": "CVE-2026-20014",
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Release of Memory after Effective Lifetime",
          "title": "CWE-401"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s IKEv2 feature allows authenticated remote attackers with valid VPN credentials to cause denial-of-service by sending crafted packets that may exhaust memory and trigger device reloads.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20014 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20014.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20014"
    },
    {
      "cve": "CVE-2026-20016",
      "cwe": {
        "id": "CWE-250",
        "name": "Execution with Unnecessary Privileges"
      },
      "notes": [
        {
          "category": "other",
          "text": "Execution with Unnecessary Privileges",
          "title": "CWE-250"
        },
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "other",
          "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
          "title": "CWE-88"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in Cisco FXOS, Secure Firewall ASA, and FTD Software CLI features allow authenticated local attackers with administrative credentials to execute arbitrary commands with root or elevated privileges or cause device reloads due to insufficient input validation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20016 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20016.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20016"
    },
    {
      "cve": "CVE-2026-20021",
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Release of Memory after Effective Lifetime",
          "title": "CWE-401"
        },
        {
          "category": "description",
          "text": "A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD software allows an authenticated, adjacent attacker to send crafted packets that exhaust device memory, causing a denial of service.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20021 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20021.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20021"
    },
    {
      "cve": "CVE-2026-20049",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Calculation of Buffer Size",
          "title": "CWE-131"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA and FTD software\u0027s handling of GCM-encrypted IKEv2 IPsec traffic allows an authenticated attacker with VPN credentials to cause a denial of service by triggering an unexpected device reload due to insufficient memory allocation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20049 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20049.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20049"
    },
    {
      "cve": "CVE-2026-20105",
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Release of Memory after Effective Lifetime",
          "title": "CWE-401"
        },
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "other",
          "text": "Use of Insufficiently Random Values",
          "title": "CWE-330"
        },
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow authenticated remote attackers to exhaust device memory, causing denial of service or device reloads.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20105 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20105.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20105"
    },
    {
      "cve": "CVE-2026-20025",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause device reload and denial of service via crafted OSPF LSU packets exploiting insufficient input validation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20025 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20025.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20025"
    },
    {
      "cve": "CVE-2026-20082",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Release of Resource after Effective Lifetime",
          "title": "CWE-772"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA Software\u0027s handling of embryonic connection limits during TCP SYN flood attacks can cause legitimate TCP SYN packets to be dropped, resulting in denial of service.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20082 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20082.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20082"
    },
    {
      "cve": "CVE-2026-20006",
      "cwe": {
        "id": "CWE-388",
        "name": "-"
      },
      "notes": [
        {
          "category": "other",
          "text": "CWE-388",
          "title": "CWE-388"
        },
        {
          "category": "description",
          "text": "A vulnerability in the TLS cryptography of the Snort 3 Detection Engine in Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to cause unexpected restarts and denial of service, with TLS 1.3 unaffected.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20006 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20006.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20006"
    },
    {
      "cve": "CVE-2026-20103",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        },
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "other",
          "text": "Use of Insufficiently Random Values",
          "title": "CWE-330"
        },
        {
          "category": "other",
          "text": "Missing Release of Memory after Effective Lifetime",
          "title": "CWE-401"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow unauthenticated remote attackers to exhaust device memory, causing denial of service and potentially making the web interface unresponsive.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20103 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20103.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20103"
    },
    {
      "cve": "CVE-2026-20008",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "title": "CWE-78"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA and FTD CLI commands allows an authenticated local attacker with Administrator credentials to execute arbitrary Lua code as root due to improper input sanitization.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20008 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20008.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20008"
    },
    {
      "cve": "CVE-2026-20063",
      "cwe": {
        "id": "CWE-250",
        "name": "Execution with Unnecessary Privileges"
      },
      "notes": [
        {
          "category": "other",
          "text": "Execution with Unnecessary Privileges",
          "title": "CWE-250"
        },
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "other",
          "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
          "title": "CWE-88"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20063 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20063.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20063"
    },
    {
      "cve": "CVE-2026-20106",
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Release of Memory after Effective Lifetime",
          "title": "CWE-401"
        },
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "other",
          "text": "Use of Insufficiently Random Values",
          "title": "CWE-330"
        },
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD software\u0027s Remote Access SSL VPN, HTTP management, and MUS functionality allow unauthenticated remote attackers to exhaust device memory, causing denial of service and requiring manual reboot.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20106 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20106.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20106"
    },
    {
      "cve": "CVE-2026-20017",
      "cwe": {
        "id": "CWE-250",
        "name": "Execution with Unnecessary Privileges"
      },
      "notes": [
        {
          "category": "other",
          "text": "Execution with Unnecessary Privileges",
          "title": "CWE-250"
        },
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "other",
          "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
          "title": "CWE-88"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20017 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20017.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20017"
    },
    {
      "cve": "CVE-2026-20100",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "other",
          "text": "Use of Insufficiently Random Values",
          "title": "CWE-330"
        },
        {
          "category": "other",
          "text": "Missing Release of Memory after Effective Lifetime",
          "title": "CWE-401"
        },
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in the Remote Access SSL VPN feature of Cisco Secure Firewall ASA and FTD, including a LUA interpreter flaw, allow authenticated remote attackers to cause device reloads and denial of service.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20100 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20100.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20100"
    },
    {
      "cve": "CVE-2026-20044",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Privilege Management",
          "title": "CWE-269"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall Management Center allows an authenticated local attacker with administrative credentials to execute arbitrary root commands by exploiting insufficient restrictions on remediation modules in lockdown mode.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20044 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20044.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20044"
    },
    {
      "cve": "CVE-2026-20024",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
          "title": "CWE-119"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause heap corruption via crafted packets, resulting in device reloads and denial-of-service.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20024 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20024.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20024"
    },
    {
      "cve": "CVE-2026-20064",
      "cwe": {
        "id": "CWE-250",
        "name": "Execution with Unnecessary Privileges"
      },
      "notes": [
        {
          "category": "other",
          "text": "Execution with Unnecessary Privileges",
          "title": "CWE-250"
        },
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "other",
          "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
          "title": "CWE-88"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software allow authenticated local attackers with low privileges to cause device reloads or execute commands with elevated privileges, resulting in denial of service or privilege escalation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20064 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20064.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20064"
    },
    {
      "cve": "CVE-2026-20023",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco ASA and FTD software\u0027s OSPF protocol allows an unauthenticated adjacent attacker to cause memory corruption and denial of service by sending crafted OSPF packets.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20023 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20023.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20023"
    },
    {
      "cve": "CVE-2026-20003",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
          "title": "CWE-89"
        },
        {
          "category": "description",
          "text": "Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and OS files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20003 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20003.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20003"
    },
    {
      "cve": "CVE-2026-20102",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
          "title": "CWE-79"
        },
        {
          "category": "description",
          "text": "A reflected cross-site scripting (XSS) vulnerability in the SAML 2.0 SSO feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to exploit insufficient input validation of HTTP parameters.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20102 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20102.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20102"
    },
    {
      "cve": "CVE-2026-20013",
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Release of Memory after Effective Lifetime",
          "title": "CWE-401"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s IKEv2 feature allows unauthenticated remote attackers to cause denial-of-service by exhausting memory with crafted packets, potentially requiring manual device reload.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20013 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20013.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20013"
    },
    {
      "cve": "CVE-2026-20070",
      "cwe": {
        "id": "CWE-80",
        "name": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
          "title": "CWE-80"
        },
        {
          "category": "description",
          "text": "A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services allows unauthenticated remote attackers to perform cross-site scripting (XSS) via improper input validation in HTTP requests, potentially enabling arbitrary code execution in users\u0027 browsers.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20070 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20070.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20070"
    },
    {
      "cve": "CVE-2026-20001",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
          "title": "CWE-89"
        },
        {
          "category": "description",
          "text": "Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and certain OS files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20001 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20001.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20001"
    },
    {
      "cve": "CVE-2026-20052",
      "cwe": {
        "id": "CWE-788",
        "name": "Access of Memory Location After End of Buffer"
      },
      "notes": [
        {
          "category": "other",
          "text": "Access of Memory Location After End of Buffer",
          "title": "CWE-788"
        },
        {
          "category": "description",
          "text": "A logic error in memory management during Snort 3 SSL packet inspection in Cisco Secure Firewall Threat Defense Software can allow an unauthenticated remote attacker to cause the Snort 3 Detection Engine to restart, resulting in a denial of service.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16",
          "CSAFPID-17"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20052 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20052.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16",
            "CSAFPID-17"
          ]
        }
      ],
      "title": "CVE-2026-20052"
    }
  ]
}

OPENSUSE-SU-2026:10325-1

Vulnerability from csaf_opensuse - Published: 2026-03-13 00:00 - Updated: 2026-03-13 00:00

Summary

clamav-1.5.2-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: clamav-1.5.2-1.1 on GA media

Description of the patch: These are all security issues fixed in the clamav-1.5.2-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-10325

CVE-2026-20031

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:clamav-1.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-1.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-1.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-1.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libclamav12-1.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

5 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2026-20031/	self
https://www.suse.com/security/cve/CVE-2026-20031	external
https://bugzilla.suse.com/1259207	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "clamav-1.5.2-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the clamav-1.5.2-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-10325",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10325-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-20031 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-20031/"
      }
    ],
    "title": "clamav-1.5.2-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-03-13T00:00:00Z",
      "generator": {
        "date": "2026-03-13T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:10325-1",
      "initial_release_date": "2026-03-13T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-03-13T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-1.1.aarch64",
                "product": {
                  "name": "clamav-1.5.2-1.1.aarch64",
                  "product_id": "clamav-1.5.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-1.1.aarch64",
                "product": {
                  "name": "clamav-devel-1.5.2-1.1.aarch64",
                  "product_id": "clamav-devel-1.5.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-docs-html-1.5.2-1.1.aarch64",
                "product": {
                  "name": "clamav-docs-html-1.5.2-1.1.aarch64",
                  "product_id": "clamav-docs-html-1.5.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-1.1.aarch64",
                "product": {
                  "name": "clamav-milter-1.5.2-1.1.aarch64",
                  "product_id": "clamav-milter-1.5.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-1.1.aarch64",
                "product": {
                  "name": "libclamav12-1.5.2-1.1.aarch64",
                  "product_id": "libclamav12-1.5.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-1.1.aarch64",
                "product": {
                  "name": "libclammspack0-1.5.2-1.1.aarch64",
                  "product_id": "libclammspack0-1.5.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-1.1.aarch64",
                "product": {
                  "name": "libfreshclam4-1.5.2-1.1.aarch64",
                  "product_id": "libfreshclam4-1.5.2-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-1.1.ppc64le",
                "product": {
                  "name": "clamav-1.5.2-1.1.ppc64le",
                  "product_id": "clamav-1.5.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-1.1.ppc64le",
                "product": {
                  "name": "clamav-devel-1.5.2-1.1.ppc64le",
                  "product_id": "clamav-devel-1.5.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-docs-html-1.5.2-1.1.ppc64le",
                "product": {
                  "name": "clamav-docs-html-1.5.2-1.1.ppc64le",
                  "product_id": "clamav-docs-html-1.5.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-1.1.ppc64le",
                "product": {
                  "name": "clamav-milter-1.5.2-1.1.ppc64le",
                  "product_id": "clamav-milter-1.5.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-1.1.ppc64le",
                "product": {
                  "name": "libclamav12-1.5.2-1.1.ppc64le",
                  "product_id": "libclamav12-1.5.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-1.1.ppc64le",
                "product": {
                  "name": "libclammspack0-1.5.2-1.1.ppc64le",
                  "product_id": "libclammspack0-1.5.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-1.1.ppc64le",
                "product": {
                  "name": "libfreshclam4-1.5.2-1.1.ppc64le",
                  "product_id": "libfreshclam4-1.5.2-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-1.1.s390x",
                "product": {
                  "name": "clamav-1.5.2-1.1.s390x",
                  "product_id": "clamav-1.5.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-1.1.s390x",
                "product": {
                  "name": "clamav-devel-1.5.2-1.1.s390x",
                  "product_id": "clamav-devel-1.5.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-docs-html-1.5.2-1.1.s390x",
                "product": {
                  "name": "clamav-docs-html-1.5.2-1.1.s390x",
                  "product_id": "clamav-docs-html-1.5.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-1.1.s390x",
                "product": {
                  "name": "clamav-milter-1.5.2-1.1.s390x",
                  "product_id": "clamav-milter-1.5.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-1.1.s390x",
                "product": {
                  "name": "libclamav12-1.5.2-1.1.s390x",
                  "product_id": "libclamav12-1.5.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-1.1.s390x",
                "product": {
                  "name": "libclammspack0-1.5.2-1.1.s390x",
                  "product_id": "libclammspack0-1.5.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-1.1.s390x",
                "product": {
                  "name": "libfreshclam4-1.5.2-1.1.s390x",
                  "product_id": "libfreshclam4-1.5.2-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-1.1.x86_64",
                "product": {
                  "name": "clamav-1.5.2-1.1.x86_64",
                  "product_id": "clamav-1.5.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-1.1.x86_64",
                "product": {
                  "name": "clamav-devel-1.5.2-1.1.x86_64",
                  "product_id": "clamav-devel-1.5.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-docs-html-1.5.2-1.1.x86_64",
                "product": {
                  "name": "clamav-docs-html-1.5.2-1.1.x86_64",
                  "product_id": "clamav-docs-html-1.5.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-1.1.x86_64",
                "product": {
                  "name": "clamav-milter-1.5.2-1.1.x86_64",
                  "product_id": "clamav-milter-1.5.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-1.1.x86_64",
                "product": {
                  "name": "libclamav12-1.5.2-1.1.x86_64",
                  "product_id": "libclamav12-1.5.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-1.1.x86_64",
                "product": {
                  "name": "libclammspack0-1.5.2-1.1.x86_64",
                  "product_id": "libclammspack0-1.5.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-1.1.x86_64",
                "product": {
                  "name": "libfreshclam4-1.5.2-1.1.x86_64",
                  "product_id": "libfreshclam4-1.5.2-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-1.5.2-1.1.aarch64"
        },
        "product_reference": "clamav-1.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-1.5.2-1.1.ppc64le"
        },
        "product_reference": "clamav-1.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-1.5.2-1.1.s390x"
        },
        "product_reference": "clamav-1.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-1.5.2-1.1.x86_64"
        },
        "product_reference": "clamav-1.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.aarch64"
        },
        "product_reference": "clamav-devel-1.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.ppc64le"
        },
        "product_reference": "clamav-devel-1.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.s390x"
        },
        "product_reference": "clamav-devel-1.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.x86_64"
        },
        "product_reference": "clamav-devel-1.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-docs-html-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.aarch64"
        },
        "product_reference": "clamav-docs-html-1.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-docs-html-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.ppc64le"
        },
        "product_reference": "clamav-docs-html-1.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-docs-html-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.s390x"
        },
        "product_reference": "clamav-docs-html-1.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-docs-html-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.x86_64"
        },
        "product_reference": "clamav-docs-html-1.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.aarch64"
        },
        "product_reference": "clamav-milter-1.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.ppc64le"
        },
        "product_reference": "clamav-milter-1.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.s390x"
        },
        "product_reference": "clamav-milter-1.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.x86_64"
        },
        "product_reference": "clamav-milter-1.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.aarch64"
        },
        "product_reference": "libclamav12-1.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.ppc64le"
        },
        "product_reference": "libclamav12-1.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.s390x"
        },
        "product_reference": "libclamav12-1.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.x86_64"
        },
        "product_reference": "libclamav12-1.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.aarch64"
        },
        "product_reference": "libclammspack0-1.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.ppc64le"
        },
        "product_reference": "libclammspack0-1.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.s390x"
        },
        "product_reference": "libclammspack0-1.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.x86_64"
        },
        "product_reference": "libclammspack0-1.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.aarch64"
        },
        "product_reference": "libfreshclam4-1.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.ppc64le"
        },
        "product_reference": "libfreshclam4-1.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.s390x"
        },
        "product_reference": "libfreshclam4-1.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.x86_64"
        },
        "product_reference": "libfreshclam4-1.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-20031",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-20031"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:clamav-1.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:clamav-1.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:clamav-1.5.2-1.1.s390x",
          "openSUSE Tumbleweed:clamav-1.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.s390x",
          "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.s390x",
          "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.s390x",
          "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.s390x",
          "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.s390x",
          "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.s390x",
          "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-20031",
          "url": "https://www.suse.com/security/cve/CVE-2026-20031"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259207 for CVE-2026-20031",
          "url": "https://bugzilla.suse.com/1259207"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:clamav-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:clamav-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:clamav-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:clamav-1.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:clamav-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:clamav-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:clamav-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:clamav-1.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:clamav-devel-1.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:clamav-docs-html-1.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:clamav-milter-1.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libclamav12-1.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libclammspack0-1.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libfreshclam4-1.5.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-03-13T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-20031"
    }
  ]
}

SUSE-SU-2026:1324-1

Vulnerability from csaf_suse - Published: 2026-04-14 13:15 - Updated: 2026-04-14 13:15

Summary

Security update for clamav

Severity

Moderate

Notes

Title of the patch: Security update for clamav

Description of the patch: This update for clamav fixes the following issues: Update to clamav 1.5.2: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file (bsc#1259207). Non security issue: - Support transactional updates (jsc#PED-14819). - Require main and library packages to be of the same version and release (bsc#1258072). Changelog: * Fixed a possible infinite loop when scanning some JPEG files by upgrading affected ClamAV dependency, a Rust image library. * The CVD verification process will now ignore certificate files in the CVD certs directory when the user lacks read permissions. * Freshclam: Fix CLD verification bug with PrivateMirror option. * Upgraded the Rust bytes dependency to a newer version to resolve RUSTSEC-2026-0007 advisory. * Fixed a possible crash caused by invalid pointer alignment on some platforms. * Minimal required Rust version is now 1.87.

Patchnames: SUSE-2026-1324,SUSE-SLE-SERVER-12-SP5-LTSS-2026-1324,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-1324

CVE-2026-20031

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 32 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.2-3.53.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.2-3.53.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.2-3.53.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.2-3.53.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.2-3.53.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.2-3.53.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.2-3.53.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.2-3.53.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

10 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2026…	self
https://bugzilla.suse.com/1221954	self
https://bugzilla.suse.com/1258072	self
https://bugzilla.suse.com/1259207	self
https://www.suse.com/security/cve/CVE-2026-20031/	self
https://www.suse.com/security/cve/CVE-2026-20031	external
https://bugzilla.suse.com/1259207	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for clamav",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for clamav fixes the following issues:\n\nUpdate to clamav 1.5.2:\n\n- CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of\n  service conditions via a crafted HTML file (bsc#1259207).\n\nNon security issue:\n\n- Support transactional updates (jsc#PED-14819).\n- Require main and library packages to be of the same version and release (bsc#1258072).\n\nChangelog:\n\n * Fixed a possible infinite loop when scanning some JPEG files by\n   upgrading affected ClamAV dependency, a Rust image library.\n * The CVD verification process will now ignore certificate files\n   in the CVD certs directory when the user lacks read permissions.\n * Freshclam: Fix CLD verification bug with PrivateMirror option.\n * Upgraded the Rust bytes dependency to a newer version to\n   resolve RUSTSEC-2026-0007 advisory.\n * Fixed a possible crash caused by invalid pointer alignment on\n   some platforms.\n * Minimal required Rust version is now 1.87.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-1324,SUSE-SLE-SERVER-12-SP5-LTSS-2026-1324,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-1324",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1324-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:1324-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261324-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:1324-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045523.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1221954",
        "url": "https://bugzilla.suse.com/1221954"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258072",
        "url": "https://bugzilla.suse.com/1258072"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259207",
        "url": "https://bugzilla.suse.com/1259207"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-20031 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-20031/"
      }
    ],
    "title": "Security update for clamav",
    "tracking": {
      "current_release_date": "2026-04-14T13:15:31Z",
      "generator": {
        "date": "2026-04-14T13:15:31Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:1324-1",
      "initial_release_date": "2026-04-14T13:15:31Z",
      "revision_history": [
        {
          "date": "2026-04-14T13:15:31Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-3.53.1.aarch64",
                "product": {
                  "name": "clamav-1.5.2-3.53.1.aarch64",
                  "product_id": "clamav-1.5.2-3.53.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-3.53.1.aarch64",
                "product": {
                  "name": "clamav-devel-1.5.2-3.53.1.aarch64",
                  "product_id": "clamav-devel-1.5.2-3.53.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-3.53.1.aarch64",
                "product": {
                  "name": "clamav-milter-1.5.2-3.53.1.aarch64",
                  "product_id": "clamav-milter-1.5.2-3.53.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-3.53.1.aarch64",
                "product": {
                  "name": "libclamav12-1.5.2-3.53.1.aarch64",
                  "product_id": "libclamav12-1.5.2-3.53.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-3.53.1.aarch64",
                "product": {
                  "name": "libclammspack0-1.5.2-3.53.1.aarch64",
                  "product_id": "libclammspack0-1.5.2-3.53.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-3.53.1.aarch64",
                "product": {
                  "name": "libfreshclam4-1.5.2-3.53.1.aarch64",
                  "product_id": "libfreshclam4-1.5.2-3.53.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-docs-html-1.5.2-3.53.1.noarch",
                "product": {
                  "name": "clamav-docs-html-1.5.2-3.53.1.noarch",
                  "product_id": "clamav-docs-html-1.5.2-3.53.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-3.53.1.ppc64le",
                "product": {
                  "name": "clamav-1.5.2-3.53.1.ppc64le",
                  "product_id": "clamav-1.5.2-3.53.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-3.53.1.ppc64le",
                "product": {
                  "name": "clamav-devel-1.5.2-3.53.1.ppc64le",
                  "product_id": "clamav-devel-1.5.2-3.53.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-3.53.1.ppc64le",
                "product": {
                  "name": "clamav-milter-1.5.2-3.53.1.ppc64le",
                  "product_id": "clamav-milter-1.5.2-3.53.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-3.53.1.ppc64le",
                "product": {
                  "name": "libclamav12-1.5.2-3.53.1.ppc64le",
                  "product_id": "libclamav12-1.5.2-3.53.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-3.53.1.ppc64le",
                "product": {
                  "name": "libclammspack0-1.5.2-3.53.1.ppc64le",
                  "product_id": "libclammspack0-1.5.2-3.53.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-3.53.1.ppc64le",
                "product": {
                  "name": "libfreshclam4-1.5.2-3.53.1.ppc64le",
                  "product_id": "libfreshclam4-1.5.2-3.53.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-3.53.1.s390x",
                "product": {
                  "name": "clamav-1.5.2-3.53.1.s390x",
                  "product_id": "clamav-1.5.2-3.53.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-3.53.1.s390x",
                "product": {
                  "name": "clamav-devel-1.5.2-3.53.1.s390x",
                  "product_id": "clamav-devel-1.5.2-3.53.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-3.53.1.s390x",
                "product": {
                  "name": "clamav-milter-1.5.2-3.53.1.s390x",
                  "product_id": "clamav-milter-1.5.2-3.53.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-3.53.1.s390x",
                "product": {
                  "name": "libclamav12-1.5.2-3.53.1.s390x",
                  "product_id": "libclamav12-1.5.2-3.53.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-3.53.1.s390x",
                "product": {
                  "name": "libclammspack0-1.5.2-3.53.1.s390x",
                  "product_id": "libclammspack0-1.5.2-3.53.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-3.53.1.s390x",
                "product": {
                  "name": "libfreshclam4-1.5.2-3.53.1.s390x",
                  "product_id": "libfreshclam4-1.5.2-3.53.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-3.53.1.x86_64",
                "product": {
                  "name": "clamav-1.5.2-3.53.1.x86_64",
                  "product_id": "clamav-1.5.2-3.53.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-3.53.1.x86_64",
                "product": {
                  "name": "clamav-devel-1.5.2-3.53.1.x86_64",
                  "product_id": "clamav-devel-1.5.2-3.53.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-3.53.1.x86_64",
                "product": {
                  "name": "clamav-milter-1.5.2-3.53.1.x86_64",
                  "product_id": "clamav-milter-1.5.2-3.53.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-3.53.1.x86_64",
                "product": {
                  "name": "libclamav12-1.5.2-3.53.1.x86_64",
                  "product_id": "libclamav12-1.5.2-3.53.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-3.53.1.x86_64",
                "product": {
                  "name": "libclammspack0-1.5.2-3.53.1.x86_64",
                  "product_id": "libclammspack0-1.5.2-3.53.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-3.53.1.x86_64",
                "product": {
                  "name": "libfreshclam4-1.5.2-3.53.1.x86_64",
                  "product_id": "libfreshclam4-1.5.2-3.53.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-3.53.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.aarch64"
        },
        "product_reference": "clamav-1.5.2-3.53.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-3.53.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.ppc64le"
        },
        "product_reference": "clamav-1.5.2-3.53.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-3.53.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.s390x"
        },
        "product_reference": "clamav-1.5.2-3.53.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.x86_64"
        },
        "product_reference": "clamav-1.5.2-3.53.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-3.53.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.aarch64"
        },
        "product_reference": "clamav-devel-1.5.2-3.53.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-3.53.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.ppc64le"
        },
        "product_reference": "clamav-devel-1.5.2-3.53.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-3.53.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.s390x"
        },
        "product_reference": "clamav-devel-1.5.2-3.53.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.x86_64"
        },
        "product_reference": "clamav-devel-1.5.2-3.53.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-docs-html-1.5.2-3.53.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.2-3.53.1.noarch"
        },
        "product_reference": "clamav-docs-html-1.5.2-3.53.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-3.53.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.aarch64"
        },
        "product_reference": "clamav-milter-1.5.2-3.53.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-3.53.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.ppc64le"
        },
        "product_reference": "clamav-milter-1.5.2-3.53.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-3.53.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.s390x"
        },
        "product_reference": "clamav-milter-1.5.2-3.53.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.x86_64"
        },
        "product_reference": "clamav-milter-1.5.2-3.53.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-3.53.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.aarch64"
        },
        "product_reference": "libclamav12-1.5.2-3.53.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-3.53.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.ppc64le"
        },
        "product_reference": "libclamav12-1.5.2-3.53.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-3.53.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.s390x"
        },
        "product_reference": "libclamav12-1.5.2-3.53.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.x86_64"
        },
        "product_reference": "libclamav12-1.5.2-3.53.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-3.53.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.aarch64"
        },
        "product_reference": "libclammspack0-1.5.2-3.53.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-3.53.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.ppc64le"
        },
        "product_reference": "libclammspack0-1.5.2-3.53.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-3.53.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.s390x"
        },
        "product_reference": "libclammspack0-1.5.2-3.53.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.x86_64"
        },
        "product_reference": "libclammspack0-1.5.2-3.53.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-3.53.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.aarch64"
        },
        "product_reference": "libfreshclam4-1.5.2-3.53.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-3.53.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.ppc64le"
        },
        "product_reference": "libfreshclam4-1.5.2-3.53.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-3.53.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.s390x"
        },
        "product_reference": "libfreshclam4-1.5.2-3.53.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.x86_64"
        },
        "product_reference": "libfreshclam4-1.5.2-3.53.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.2-3.53.1.x86_64"
        },
        "product_reference": "clamav-1.5.2-3.53.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.2-3.53.1.x86_64"
        },
        "product_reference": "clamav-devel-1.5.2-3.53.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-docs-html-1.5.2-3.53.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.2-3.53.1.noarch"
        },
        "product_reference": "clamav-docs-html-1.5.2-3.53.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.2-3.53.1.x86_64"
        },
        "product_reference": "clamav-milter-1.5.2-3.53.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.2-3.53.1.x86_64"
        },
        "product_reference": "libclamav12-1.5.2-3.53.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.2-3.53.1.x86_64"
        },
        "product_reference": "libclammspack0-1.5.2-3.53.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-3.53.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.2-3.53.1.x86_64"
        },
        "product_reference": "libfreshclam4-1.5.2-3.53.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-20031",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-20031"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.2-3.53.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.2-3.53.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.2-3.53.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.2-3.53.1.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.2-3.53.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.2-3.53.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.2-3.53.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.2-3.53.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-20031",
          "url": "https://www.suse.com/security/cve/CVE-2026-20031"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259207 for CVE-2026-20031",
          "url": "https://bugzilla.suse.com/1259207"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.2-3.53.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.2-3.53.1.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.2-3.53.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-devel-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-docs-html-1.5.2-3.53.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:clamav-milter-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclamav12-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libclammspack0-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libfreshclam4-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-devel-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-docs-html-1.5.2-3.53.1.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:clamav-milter-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclamav12-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libclammspack0-1.5.2-3.53.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libfreshclam4-1.5.2-3.53.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-14T13:15:31Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-20031"
    }
  ]
}

SUSE-SU-2026:1325-1

Vulnerability from csaf_suse - Published: 2026-04-14 13:15 - Updated: 2026-04-14 13:15

Summary

Security update for clamav

Severity

Moderate

Notes

Title of the patch: Security update for clamav

Description of the patch: This update for clamav fixes the following issues: Update to clamav 1.5.2: Security issue: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file (bsc#1259207). Non security issue: - Support transactional updates (jsc#PED-14819). Changelog: * Fixed a possible infinite loop when scanning some JPEG files by upgrading affected ClamAV dependency, a Rust image library. * The CVD verification process will now ignore certificate files in the CVD certs directory when the user lacks read permissions. * Freshclam: Fix CLD verification bug with PrivateMirror option. * Upgraded the Rust bytes dependency to a newer version to resolve RUSTSEC-2026-0007 advisory. * Fixed a possible crash caused by invalid pointer alignment on some platforms. * Minimal required Rust version is now 1.87.

Patchnames: SUSE-2026-1325,SUSE-SLE-Module-Basesystem-15-SP7-2026-1325,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1325,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1325,openSUSE-SLE-15.6-2026-1325

CVE-2026-20031

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 88 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-docs-html-1.5.2-150600.18.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-docs-html-1.5.2-150600.18.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-docs-html-1.5.2-150600.18.25.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-docs-html-1.5.2-150600.18.25.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

10 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2026…	self
https://bugzilla.suse.com/1221954	self
https://bugzilla.suse.com/1258072	self
https://bugzilla.suse.com/1259207	self
https://www.suse.com/security/cve/CVE-2026-20031/	self
https://www.suse.com/security/cve/CVE-2026-20031	external
https://bugzilla.suse.com/1259207	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for clamav",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for clamav fixes the following issues:\n\nUpdate to clamav 1.5.2:\n\nSecurity issue:\n\n- CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of\n  service conditions via a crafted HTML file (bsc#1259207).\n\nNon security issue:\n\n- Support transactional updates (jsc#PED-14819).\n\nChangelog:\n\n * Fixed a possible infinite loop when scanning some JPEG files by\n upgrading affected ClamAV dependency, a Rust image library.\n * The CVD verification process will now ignore certificate files\n in the CVD certs directory when the user lacks read permissions.\n * Freshclam: Fix CLD verification bug with PrivateMirror option.\n * Upgraded the Rust bytes dependency to a newer version to\n resolve RUSTSEC-2026-0007 advisory.\n * Fixed a possible crash caused by invalid pointer alignment on\n some platforms.\n * Minimal required Rust version is now 1.87.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-1325,SUSE-SLE-Module-Basesystem-15-SP7-2026-1325,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1325,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1325,openSUSE-SLE-15.6-2026-1325",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1325-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:1325-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261325-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:1325-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045522.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1221954",
        "url": "https://bugzilla.suse.com/1221954"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258072",
        "url": "https://bugzilla.suse.com/1258072"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259207",
        "url": "https://bugzilla.suse.com/1259207"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-20031 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-20031/"
      }
    ],
    "title": "Security update for clamav",
    "tracking": {
      "current_release_date": "2026-04-14T13:15:45Z",
      "generator": {
        "date": "2026-04-14T13:15:45Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:1325-1",
      "initial_release_date": "2026-04-14T13:15:45Z",
      "revision_history": [
        {
          "date": "2026-04-14T13:15:45Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-150600.18.25.1.aarch64",
                "product": {
                  "name": "clamav-1.5.2-150600.18.25.1.aarch64",
                  "product_id": "clamav-1.5.2-150600.18.25.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-150600.18.25.1.aarch64",
                "product": {
                  "name": "clamav-devel-1.5.2-150600.18.25.1.aarch64",
                  "product_id": "clamav-devel-1.5.2-150600.18.25.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-150600.18.25.1.aarch64",
                "product": {
                  "name": "clamav-milter-1.5.2-150600.18.25.1.aarch64",
                  "product_id": "clamav-milter-1.5.2-150600.18.25.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-150600.18.25.1.aarch64",
                "product": {
                  "name": "libclamav12-1.5.2-150600.18.25.1.aarch64",
                  "product_id": "libclamav12-1.5.2-150600.18.25.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-150600.18.25.1.aarch64",
                "product": {
                  "name": "libclammspack0-1.5.2-150600.18.25.1.aarch64",
                  "product_id": "libclammspack0-1.5.2-150600.18.25.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-150600.18.25.1.aarch64",
                "product": {
                  "name": "libfreshclam4-1.5.2-150600.18.25.1.aarch64",
                  "product_id": "libfreshclam4-1.5.2-150600.18.25.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-docs-html-1.5.2-150600.18.25.1.noarch",
                "product": {
                  "name": "clamav-docs-html-1.5.2-150600.18.25.1.noarch",
                  "product_id": "clamav-docs-html-1.5.2-150600.18.25.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-150600.18.25.1.ppc64le",
                "product": {
                  "name": "clamav-1.5.2-150600.18.25.1.ppc64le",
                  "product_id": "clamav-1.5.2-150600.18.25.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-150600.18.25.1.ppc64le",
                "product": {
                  "name": "clamav-devel-1.5.2-150600.18.25.1.ppc64le",
                  "product_id": "clamav-devel-1.5.2-150600.18.25.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-150600.18.25.1.ppc64le",
                "product": {
                  "name": "clamav-milter-1.5.2-150600.18.25.1.ppc64le",
                  "product_id": "clamav-milter-1.5.2-150600.18.25.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-150600.18.25.1.ppc64le",
                "product": {
                  "name": "libclamav12-1.5.2-150600.18.25.1.ppc64le",
                  "product_id": "libclamav12-1.5.2-150600.18.25.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-150600.18.25.1.ppc64le",
                "product": {
                  "name": "libclammspack0-1.5.2-150600.18.25.1.ppc64le",
                  "product_id": "libclammspack0-1.5.2-150600.18.25.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
                "product": {
                  "name": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
                  "product_id": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-150600.18.25.1.s390x",
                "product": {
                  "name": "clamav-1.5.2-150600.18.25.1.s390x",
                  "product_id": "clamav-1.5.2-150600.18.25.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-150600.18.25.1.s390x",
                "product": {
                  "name": "clamav-devel-1.5.2-150600.18.25.1.s390x",
                  "product_id": "clamav-devel-1.5.2-150600.18.25.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-150600.18.25.1.s390x",
                "product": {
                  "name": "clamav-milter-1.5.2-150600.18.25.1.s390x",
                  "product_id": "clamav-milter-1.5.2-150600.18.25.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-150600.18.25.1.s390x",
                "product": {
                  "name": "libclamav12-1.5.2-150600.18.25.1.s390x",
                  "product_id": "libclamav12-1.5.2-150600.18.25.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-150600.18.25.1.s390x",
                "product": {
                  "name": "libclammspack0-1.5.2-150600.18.25.1.s390x",
                  "product_id": "libclammspack0-1.5.2-150600.18.25.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-150600.18.25.1.s390x",
                "product": {
                  "name": "libfreshclam4-1.5.2-150600.18.25.1.s390x",
                  "product_id": "libfreshclam4-1.5.2-150600.18.25.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-150600.18.25.1.x86_64",
                "product": {
                  "name": "clamav-1.5.2-150600.18.25.1.x86_64",
                  "product_id": "clamav-1.5.2-150600.18.25.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-150600.18.25.1.x86_64",
                "product": {
                  "name": "clamav-devel-1.5.2-150600.18.25.1.x86_64",
                  "product_id": "clamav-devel-1.5.2-150600.18.25.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-150600.18.25.1.x86_64",
                "product": {
                  "name": "clamav-milter-1.5.2-150600.18.25.1.x86_64",
                  "product_id": "clamav-milter-1.5.2-150600.18.25.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-150600.18.25.1.x86_64",
                "product": {
                  "name": "libclamav12-1.5.2-150600.18.25.1.x86_64",
                  "product_id": "libclamav12-1.5.2-150600.18.25.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-150600.18.25.1.x86_64",
                "product": {
                  "name": "libclammspack0-1.5.2-150600.18.25.1.x86_64",
                  "product_id": "libclammspack0-1.5.2-150600.18.25.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-150600.18.25.1.x86_64",
                "product": {
                  "name": "libfreshclam4-1.5.2-150600.18.25.1.x86_64",
                  "product_id": "libfreshclam4-1.5.2-150600.18.25.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.6",
                "product": {
                  "name": "openSUSE Leap 15.6",
                  "product_id": "openSUSE Leap 15.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-docs-html-1.5.2-150600.18.25.1.noarch as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-docs-html-1.5.2-150600.18.25.1.noarch"
        },
        "product_reference": "clamav-docs-html-1.5.2-150600.18.25.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-docs-html-1.5.2-150600.18.25.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-docs-html-1.5.2-150600.18.25.1.noarch"
        },
        "product_reference": "clamav-docs-html-1.5.2-150600.18.25.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-docs-html-1.5.2-150600.18.25.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-docs-html-1.5.2-150600.18.25.1.noarch"
        },
        "product_reference": "clamav-docs-html-1.5.2-150600.18.25.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-150600.18.25.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "clamav-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-150600.18.25.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "clamav-devel-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-docs-html-1.5.2-150600.18.25.1.noarch as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-docs-html-1.5.2-150600.18.25.1.noarch"
        },
        "product_reference": "clamav-docs-html-1.5.2-150600.18.25.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-150600.18.25.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "clamav-milter-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-150600.18.25.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "libclamav12-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-150600.18.25.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "libclammspack0-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.aarch64"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.s390x"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-150600.18.25.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
        },
        "product_reference": "libfreshclam4-1.5.2-150600.18.25.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-20031",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-20031"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
          "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.aarch64",
          "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.ppc64le",
          "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.s390x",
          "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.x86_64",
          "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.aarch64",
          "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
          "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.s390x",
          "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.x86_64",
          "openSUSE Leap 15.6:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
          "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.aarch64",
          "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
          "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.s390x",
          "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.x86_64",
          "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.aarch64",
          "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.ppc64le",
          "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.s390x",
          "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.x86_64",
          "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.aarch64",
          "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
          "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.s390x",
          "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.x86_64",
          "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
          "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
          "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.s390x",
          "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-20031",
          "url": "https://www.suse.com/security/cve/CVE-2026-20031"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259207 for CVE-2026-20031",
          "url": "https://bugzilla.suse.com/1259207"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
            "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.aarch64",
            "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.ppc64le",
            "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.s390x",
            "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.x86_64",
            "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.aarch64",
            "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
            "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.s390x",
            "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.x86_64",
            "openSUSE Leap 15.6:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
            "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.aarch64",
            "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
            "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.s390x",
            "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.x86_64",
            "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.aarch64",
            "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.ppc64le",
            "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.s390x",
            "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.x86_64",
            "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.aarch64",
            "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
            "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.s390x",
            "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.x86_64",
            "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
            "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
            "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.s390x",
            "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-devel-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:clamav-milter-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclamav12-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libclammspack0-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-devel-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:clamav-milter-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclamav12-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libclammspack0-1.5.2-150600.18.25.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libfreshclam4-1.5.2-150600.18.25.1.x86_64",
            "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.aarch64",
            "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.ppc64le",
            "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.s390x",
            "openSUSE Leap 15.6:clamav-1.5.2-150600.18.25.1.x86_64",
            "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.aarch64",
            "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.ppc64le",
            "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.s390x",
            "openSUSE Leap 15.6:clamav-devel-1.5.2-150600.18.25.1.x86_64",
            "openSUSE Leap 15.6:clamav-docs-html-1.5.2-150600.18.25.1.noarch",
            "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.aarch64",
            "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.ppc64le",
            "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.s390x",
            "openSUSE Leap 15.6:clamav-milter-1.5.2-150600.18.25.1.x86_64",
            "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.aarch64",
            "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.ppc64le",
            "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.s390x",
            "openSUSE Leap 15.6:libclamav12-1.5.2-150600.18.25.1.x86_64",
            "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.aarch64",
            "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.ppc64le",
            "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.s390x",
            "openSUSE Leap 15.6:libclammspack0-1.5.2-150600.18.25.1.x86_64",
            "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.aarch64",
            "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.ppc64le",
            "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.s390x",
            "openSUSE Leap 15.6:libfreshclam4-1.5.2-150600.18.25.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-14T13:15:45Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-20031"
    }
  ]
}

SUSE-SU-2026:21358-1

Vulnerability from csaf_suse - Published: 2026-04-20 15:16 - Updated: 2026-04-20 15:16

Summary

Security update for clamav

Severity

Moderate

Notes

Title of the patch: Security update for clamav

Patchnames: SUSE-SLES-16.0-487

CVE-2026-20031

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 50 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

10 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2026…	self
https://bugzilla.suse.com/1221954	self
https://bugzilla.suse.com/1258072	self
https://bugzilla.suse.com/1259207	self
https://www.suse.com/security/cve/CVE-2026-20031/	self
https://www.suse.com/security/cve/CVE-2026-20031	external
https://bugzilla.suse.com/1259207	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for clamav",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for clamav fixes the following issues:\n\nUpdate to clamav 1.5.2:\n\nSecurity issue:\n\n- CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of\n  service conditions via a crafted HTML file (bsc#1259207).\n\nNon security issue:\n\n- Support transactional updates (jsc#PED-14819).\n\nChangelog:\n\n * Fixed a possible infinite loop when scanning some JPEG files by\n upgrading affected ClamAV dependency, a Rust image library.\n * The CVD verification process will now ignore certificate files\n in the CVD certs directory when the user lacks read permissions.\n * Freshclam: Fix CLD verification bug with PrivateMirror option.\n * Upgraded the Rust bytes dependency to a newer version to\n resolve RUSTSEC-2026-0007 advisory.\n * Fixed a possible crash caused by invalid pointer alignment on\n some platforms.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLES-16.0-487",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21358-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:21358-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202621358-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:21358-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-April/046083.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1221954",
        "url": "https://bugzilla.suse.com/1221954"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258072",
        "url": "https://bugzilla.suse.com/1258072"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259207",
        "url": "https://bugzilla.suse.com/1259207"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-20031 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-20031/"
      }
    ],
    "title": "Security update for clamav",
    "tracking": {
      "current_release_date": "2026-04-20T15:16:17Z",
      "generator": {
        "date": "2026-04-20T15:16:17Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:21358-1",
      "initial_release_date": "2026-04-20T15:16:17Z",
      "revision_history": [
        {
          "date": "2026-04-20T15:16:17Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-160000.1.1.aarch64",
                "product": {
                  "name": "clamav-1.5.2-160000.1.1.aarch64",
                  "product_id": "clamav-1.5.2-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-160000.1.1.aarch64",
                "product": {
                  "name": "clamav-devel-1.5.2-160000.1.1.aarch64",
                  "product_id": "clamav-devel-1.5.2-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-160000.1.1.aarch64",
                "product": {
                  "name": "clamav-milter-1.5.2-160000.1.1.aarch64",
                  "product_id": "clamav-milter-1.5.2-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-160000.1.1.aarch64",
                "product": {
                  "name": "libclamav12-1.5.2-160000.1.1.aarch64",
                  "product_id": "libclamav12-1.5.2-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-160000.1.1.aarch64",
                "product": {
                  "name": "libclammspack0-1.5.2-160000.1.1.aarch64",
                  "product_id": "libclammspack0-1.5.2-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-160000.1.1.aarch64",
                "product": {
                  "name": "libfreshclam4-1.5.2-160000.1.1.aarch64",
                  "product_id": "libfreshclam4-1.5.2-160000.1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-docs-html-1.5.2-160000.1.1.noarch",
                "product": {
                  "name": "clamav-docs-html-1.5.2-160000.1.1.noarch",
                  "product_id": "clamav-docs-html-1.5.2-160000.1.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-160000.1.1.ppc64le",
                "product": {
                  "name": "clamav-1.5.2-160000.1.1.ppc64le",
                  "product_id": "clamav-1.5.2-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-160000.1.1.ppc64le",
                "product": {
                  "name": "clamav-devel-1.5.2-160000.1.1.ppc64le",
                  "product_id": "clamav-devel-1.5.2-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-160000.1.1.ppc64le",
                "product": {
                  "name": "clamav-milter-1.5.2-160000.1.1.ppc64le",
                  "product_id": "clamav-milter-1.5.2-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-160000.1.1.ppc64le",
                "product": {
                  "name": "libclamav12-1.5.2-160000.1.1.ppc64le",
                  "product_id": "libclamav12-1.5.2-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-160000.1.1.ppc64le",
                "product": {
                  "name": "libclammspack0-1.5.2-160000.1.1.ppc64le",
                  "product_id": "libclammspack0-1.5.2-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-160000.1.1.ppc64le",
                "product": {
                  "name": "libfreshclam4-1.5.2-160000.1.1.ppc64le",
                  "product_id": "libfreshclam4-1.5.2-160000.1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-160000.1.1.s390x",
                "product": {
                  "name": "clamav-1.5.2-160000.1.1.s390x",
                  "product_id": "clamav-1.5.2-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-160000.1.1.s390x",
                "product": {
                  "name": "clamav-devel-1.5.2-160000.1.1.s390x",
                  "product_id": "clamav-devel-1.5.2-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-160000.1.1.s390x",
                "product": {
                  "name": "clamav-milter-1.5.2-160000.1.1.s390x",
                  "product_id": "clamav-milter-1.5.2-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-160000.1.1.s390x",
                "product": {
                  "name": "libclamav12-1.5.2-160000.1.1.s390x",
                  "product_id": "libclamav12-1.5.2-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-160000.1.1.s390x",
                "product": {
                  "name": "libclammspack0-1.5.2-160000.1.1.s390x",
                  "product_id": "libclammspack0-1.5.2-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-160000.1.1.s390x",
                "product": {
                  "name": "libfreshclam4-1.5.2-160000.1.1.s390x",
                  "product_id": "libfreshclam4-1.5.2-160000.1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "clamav-1.5.2-160000.1.1.x86_64",
                "product": {
                  "name": "clamav-1.5.2-160000.1.1.x86_64",
                  "product_id": "clamav-1.5.2-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-devel-1.5.2-160000.1.1.x86_64",
                "product": {
                  "name": "clamav-devel-1.5.2-160000.1.1.x86_64",
                  "product_id": "clamav-devel-1.5.2-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "clamav-milter-1.5.2-160000.1.1.x86_64",
                "product": {
                  "name": "clamav-milter-1.5.2-160000.1.1.x86_64",
                  "product_id": "clamav-milter-1.5.2-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libclamav12-1.5.2-160000.1.1.x86_64",
                "product": {
                  "name": "libclamav12-1.5.2-160000.1.1.x86_64",
                  "product_id": "libclamav12-1.5.2-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libclammspack0-1.5.2-160000.1.1.x86_64",
                "product": {
                  "name": "libclammspack0-1.5.2-160000.1.1.x86_64",
                  "product_id": "libclammspack0-1.5.2-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreshclam4-1.5.2-160000.1.1.x86_64",
                "product": {
                  "name": "libfreshclam4-1.5.2-160000.1.1.x86_64",
                  "product_id": "libfreshclam4-1.5.2-160000.1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 16.0",
                "product": {
                  "name": "SUSE Linux Enterprise Server 16.0",
                  "product_id": "SUSE Linux Enterprise Server 16.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:16:16.0:server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP applications 16.0",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP applications 16.0",
                  "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.aarch64"
        },
        "product_reference": "clamav-1.5.2-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.ppc64le"
        },
        "product_reference": "clamav-1.5.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.s390x"
        },
        "product_reference": "clamav-1.5.2-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.x86_64"
        },
        "product_reference": "clamav-1.5.2-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.aarch64"
        },
        "product_reference": "clamav-devel-1.5.2-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le"
        },
        "product_reference": "clamav-devel-1.5.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.s390x"
        },
        "product_reference": "clamav-devel-1.5.2-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.x86_64"
        },
        "product_reference": "clamav-devel-1.5.2-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-docs-html-1.5.2-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch"
        },
        "product_reference": "clamav-docs-html-1.5.2-160000.1.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.aarch64"
        },
        "product_reference": "clamav-milter-1.5.2-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le"
        },
        "product_reference": "clamav-milter-1.5.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.s390x"
        },
        "product_reference": "clamav-milter-1.5.2-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.x86_64"
        },
        "product_reference": "clamav-milter-1.5.2-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.aarch64"
        },
        "product_reference": "libclamav12-1.5.2-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.ppc64le"
        },
        "product_reference": "libclamav12-1.5.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.s390x"
        },
        "product_reference": "libclamav12-1.5.2-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.x86_64"
        },
        "product_reference": "libclamav12-1.5.2-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.aarch64"
        },
        "product_reference": "libclammspack0-1.5.2-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le"
        },
        "product_reference": "libclammspack0-1.5.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.s390x"
        },
        "product_reference": "libclammspack0-1.5.2-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.x86_64"
        },
        "product_reference": "libclammspack0-1.5.2-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64"
        },
        "product_reference": "libfreshclam4-1.5.2-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le"
        },
        "product_reference": "libfreshclam4-1.5.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.s390x"
        },
        "product_reference": "libfreshclam4-1.5.2-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
        },
        "product_reference": "libfreshclam4-1.5.2-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.aarch64"
        },
        "product_reference": "clamav-1.5.2-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.ppc64le"
        },
        "product_reference": "clamav-1.5.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.s390x"
        },
        "product_reference": "clamav-1.5.2-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.x86_64"
        },
        "product_reference": "clamav-1.5.2-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.aarch64"
        },
        "product_reference": "clamav-devel-1.5.2-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le"
        },
        "product_reference": "clamav-devel-1.5.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.s390x"
        },
        "product_reference": "clamav-devel-1.5.2-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-devel-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.x86_64"
        },
        "product_reference": "clamav-devel-1.5.2-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-docs-html-1.5.2-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch"
        },
        "product_reference": "clamav-docs-html-1.5.2-160000.1.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.aarch64"
        },
        "product_reference": "clamav-milter-1.5.2-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le"
        },
        "product_reference": "clamav-milter-1.5.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.s390x"
        },
        "product_reference": "clamav-milter-1.5.2-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "clamav-milter-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.x86_64"
        },
        "product_reference": "clamav-milter-1.5.2-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.aarch64"
        },
        "product_reference": "libclamav12-1.5.2-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.ppc64le"
        },
        "product_reference": "libclamav12-1.5.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.s390x"
        },
        "product_reference": "libclamav12-1.5.2-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclamav12-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.x86_64"
        },
        "product_reference": "libclamav12-1.5.2-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.aarch64"
        },
        "product_reference": "libclammspack0-1.5.2-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le"
        },
        "product_reference": "libclammspack0-1.5.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.s390x"
        },
        "product_reference": "libclammspack0-1.5.2-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libclammspack0-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.x86_64"
        },
        "product_reference": "libclammspack0-1.5.2-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64"
        },
        "product_reference": "libfreshclam4-1.5.2-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le"
        },
        "product_reference": "libfreshclam4-1.5.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.s390x"
        },
        "product_reference": "libfreshclam4-1.5.2-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreshclam4-1.5.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
        },
        "product_reference": "libfreshclam4-1.5.2-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-20031",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-20031"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
          "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-20031",
          "url": "https://www.suse.com/security/cve/CVE-2026-20031"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259207 for CVE-2026-20031",
          "url": "https://bugzilla.suse.com/1259207"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
            "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:clamav-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
            "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-devel-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-docs-html-1.5.2-160000.1.1.noarch",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:clamav-milter-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclamav12-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libclammspack0-1.5.2-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libfreshclam4-1.5.2-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-20T15:16:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-20031"
    }
  ]
}

ubuntu-cve-2026-20031

Vulnerability from osv_ubuntu

Published

2026-03-04 18:16

Modified

2026-05-20 15:24

Summary

Details

Severity

5.3 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-20031	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-20031	REPORT
	https://blog.clamav.net/2026/03/clamav-152-and-14…	REPORT
	https://ubuntu.com/security/notices/USN-8207-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clamav",
            "binary_version": "0.103.9+dfsg-0ubuntu0.14.04.1+esm1"
          },
          {
            "binary_name": "clamav-base",
            "binary_version": "0.103.9+dfsg-0ubuntu0.14.04.1+esm1"
          },
          {
            "binary_name": "clamav-daemon",
            "binary_version": "0.103.9+dfsg-0ubuntu0.14.04.1+esm1"
          },
          {
            "binary_name": "clamav-docs",
            "binary_version": "0.103.9+dfsg-0ubuntu0.14.04.1+esm1"
          },
          {
            "binary_name": "clamav-freshclam",
            "binary_version": "0.103.9+dfsg-0ubuntu0.14.04.1+esm1"
          },
          {
            "binary_name": "clamav-milter",
            "binary_version": "0.103.9+dfsg-0ubuntu0.14.04.1+esm1"
          },
          {
            "binary_name": "clamav-testfiles",
            "binary_version": "0.103.9+dfsg-0ubuntu0.14.04.1+esm1"
          },
          {
            "binary_name": "libclamav9",
            "binary_version": "0.103.9+dfsg-0ubuntu0.14.04.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "clamav",
        "purl": "pkg:deb/ubuntu/clamav@0.103.9+dfsg-0ubuntu0.14.04.1+esm1?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.97.8+dfsg-1ubuntu4",
        "0.97.8+dfsg-1ubuntu5",
        "0.98.1+dfsg-1ubuntu4",
        "0.98.1+dfsg-1ubuntu5",
        "0.98.1+dfsg-2ubuntu2",
        "0.98.1+dfsg-4ubuntu1",
        "0.98.1+dfsg-4ubuntu1.1",
        "0.98.5+addedllvm-0ubuntu0.14.04.1",
        "0.98.6+dfsg-0ubuntu0.14.04.1",
        "0.98.7+dfsg-0ubuntu0.14.04.1",
        "0.99.2+addedllvm-0ubuntu0.14.04.1",
        "0.99.2+addedllvm-0ubuntu0.14.04.2",
        "0.99.3+addedllvm-0ubuntu0.14.04.1",
        "0.99.4+addedllvm-0ubuntu0.14.04.1",
        "0.100.1+dfsg-1ubuntu0.14.04.1",
        "0.100.1+dfsg-1ubuntu0.14.04.2",
        "0.100.1+dfsg-1ubuntu0.14.04.3",
        "0.100.1+dfsg-1ubuntu0.14.04.4",
        "0.100.2+dfsg-1ubuntu0.14.04.1",
        "0.100.2+dfsg-1ubuntu0.14.04.2",
        "0.100.3+dfsg-0ubuntu0.14.04.1",
        "0.100.3+dfsg-0ubuntu0.14.04.1+esm1",
        "0.101.4+dfsg-0ubuntu0.14.04.1+esm1",
        "0.102.1+dfsg-0ubuntu0.14.04.1+esm1",
        "0.102.2+dfsg-0ubuntu0.14.04.1+esm1",
        "0.102.3+dfsg-0ubuntu0.14.04.1+esm1",
        "0.102.4+dfsg-0ubuntu0.14.04.1+esm1",
        "0.103.2+dfsg-0ubuntu0.14.04.1+esm1",
        "0.103.2+dfsg-0ubuntu0.14.04.1+esm2",
        "0.103.5+dfsg-0ubuntu0.14.04.1+esm1",
        "0.103.6+dfsg-0ubuntu0.14.04.1+esm1",
        "0.103.8+dfsg-0ubuntu0.14.04.1+esm1",
        "0.103.9+dfsg-0ubuntu0.14.04.1+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clamav",
            "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "clamav-base",
            "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "clamav-daemon",
            "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "clamav-docs",
            "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "clamav-freshclam",
            "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "clamav-milter",
            "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "clamav-testfiles",
            "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "clamdscan",
            "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "libclamav9",
            "binary_version": "0.103.12+dfsg-0ubuntu0.16.04.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "clamav",
        "purl": "pkg:deb/ubuntu/clamav@0.103.12+dfsg-0ubuntu0.16.04.1+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.98.7+dfsg-0ubuntu4",
        "0.98.7+dfsg-0ubuntu5",
        "0.99+dfsg-1ubuntu1",
        "0.99+dfsg-1ubuntu1.1",
        "0.99+dfsg-1ubuntu1.2",
        "0.99.2+dfsg-0ubuntu0.16.04.1",
        "0.99.2+dfsg-0ubuntu0.16.04.2",
        "0.99.2+dfsg-0ubuntu0.16.04.3",
        "0.99.3+addedllvm-0ubuntu0.16.04.1",
        "0.99.4+addedllvm-0ubuntu0.16.04.1",
        "0.100.1+dfsg-1ubuntu0.16.04.1",
        "0.100.1+dfsg-1ubuntu0.16.04.2",
        "0.100.1+dfsg-1ubuntu0.16.04.3",
        "0.100.2+dfsg-1ubuntu0.16.04.1",
        "0.100.3+dfsg-0ubuntu0.16.04.1",
        "0.101.4+dfsg-0ubuntu0.16.04.1",
        "0.102.1+dfsg-0ubuntu0.16.04.2",
        "0.102.2+dfsg-0ubuntu0.16.04.1",
        "0.102.3+dfsg-0ubuntu0.16.04.1",
        "0.102.4+dfsg-0ubuntu0.16.04.1",
        "0.103.2+dfsg-0ubuntu0.16.04.1",
        "0.103.2+dfsg-0ubuntu0.16.04.1+esm1",
        "0.103.5+dfsg-0ubuntu0.16.04.1+esm1",
        "0.103.6+dfsg-0ubuntu0.16.04.1+esm1",
        "0.103.8+dfsg-0ubuntu0.16.04.1+esm1",
        "0.103.9+dfsg-0ubuntu0.16.04.1+esm1",
        "0.103.12+dfsg-0ubuntu0.16.04.1+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clamav",
            "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1"
          },
          {
            "binary_name": "clamav-base",
            "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1"
          },
          {
            "binary_name": "clamav-daemon",
            "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1"
          },
          {
            "binary_name": "clamav-docs",
            "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1"
          },
          {
            "binary_name": "clamav-freshclam",
            "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1"
          },
          {
            "binary_name": "clamav-milter",
            "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1"
          },
          {
            "binary_name": "clamav-testfiles",
            "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1"
          },
          {
            "binary_name": "clamdscan",
            "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1"
          },
          {
            "binary_name": "libclamav9",
            "binary_version": "0.103.12+dfsg-0ubuntu0.18.04.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "clamav",
        "purl": "pkg:deb/ubuntu/clamav@0.103.12+dfsg-0ubuntu0.18.04.1+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.99.2+dfsg-6ubuntu2",
        "0.99.3~beta1+dfsg-2ubuntu1",
        "0.99.3~beta1+dfsg-2ubuntu2",
        "0.99.3+addedllvm-0ubuntu1",
        "0.99.3+addedllvm-0ubuntu2",
        "0.99.4+addedllvm-0ubuntu1",
        "0.100.1+dfsg-1ubuntu0.18.04.1",
        "0.100.1+dfsg-1ubuntu0.18.04.2",
        "0.100.1+dfsg-1ubuntu0.18.04.3",
        "0.100.2+dfsg-1ubuntu0.18.04.1",
        "0.100.3+dfsg-0ubuntu0.18.04.1",
        "0.101.4+dfsg-0ubuntu0.18.04.1",
        "0.102.1+dfsg-0ubuntu0.18.04.2",
        "0.102.2+dfsg-0ubuntu0.18.04.1",
        "0.102.3+dfsg-0ubuntu0.18.04.1",
        "0.102.4+dfsg-0ubuntu0.18.04.1",
        "0.103.2+dfsg-0ubuntu0.18.04.1",
        "0.103.2+dfsg-0ubuntu0.18.04.2",
        "0.103.2+dfsg-0ubuntu0.18.04.3",
        "0.103.5+dfsg-0ubuntu0.18.04.1",
        "0.103.6+dfsg-0ubuntu0.18.04.1",
        "0.103.8+dfsg-0ubuntu0.18.04.1",
        "0.103.9+dfsg-0ubuntu0.18.04.1+esm1",
        "0.103.12+dfsg-0ubuntu0.18.04.1+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clamav",
            "binary_version": "1.4.3+dfsg-0ubuntu0.20.04.1+esm1"
          },
          {
            "binary_name": "clamav-base",
            "binary_version": "1.4.3+dfsg-0ubuntu0.20.04.1+esm1"
          },
          {
            "binary_name": "clamav-daemon",
            "binary_version": "1.4.3+dfsg-0ubuntu0.20.04.1+esm1"
          },
          {
            "binary_name": "clamav-docs",
            "binary_version": "1.4.3+dfsg-0ubuntu0.20.04.1+esm1"
          },
          {
            "binary_name": "clamav-freshclam",
            "binary_version": "1.4.3+dfsg-0ubuntu0.20.04.1+esm1"
          },
          {
            "binary_name": "clamav-milter",
            "binary_version": "1.4.3+dfsg-0ubuntu0.20.04.1+esm1"
          },
          {
            "binary_name": "clamav-testfiles",
            "binary_version": "1.4.3+dfsg-0ubuntu0.20.04.1+esm1"
          },
          {
            "binary_name": "clamdscan",
            "binary_version": "1.4.3+dfsg-0ubuntu0.20.04.1+esm1"
          },
          {
            "binary_name": "libclamav12",
            "binary_version": "1.4.3+dfsg-0ubuntu0.20.04.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "clamav",
        "purl": "pkg:deb/ubuntu/clamav@1.4.3+dfsg-0ubuntu0.20.04.1+esm1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.101.4+dfsg-1ubuntu1",
        "0.102.1+dfsg-1ubuntu1",
        "0.102.1+dfsg-2ubuntu1",
        "0.102.1+dfsg-2ubuntu2",
        "0.102.2+dfsg-1ubuntu1",
        "0.102.2+dfsg-2ubuntu1",
        "0.102.3+dfsg-0ubuntu0.20.04.1",
        "0.102.4+dfsg-0ubuntu0.20.04.1",
        "0.103.2+dfsg-0ubuntu0.20.04.1",
        "0.103.2+dfsg-0ubuntu0.20.04.2",
        "0.103.5+dfsg-1~20.04.1",
        "0.103.6+dfsg-0ubuntu0.20.04.1",
        "0.103.8+dfsg-0ubuntu0.20.04.1",
        "0.103.9+dfsg-0ubuntu0.20.04.1",
        "0.103.11+dfsg-0ubuntu0.20.04.1",
        "0.103.12+dfsg-0ubuntu0.20.04.1",
        "1.4.3+dfsg-0ubuntu0.20.04.1+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "clamav",
            "binary_version": "1.4.4+dfsg-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "clamav-base",
            "binary_version": "1.4.4+dfsg-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "clamav-daemon",
            "binary_version": "1.4.4+dfsg-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "clamav-docs",
            "binary_version": "1.4.4+dfsg-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "clamav-freshclam",
            "binary_version": "1.4.4+dfsg-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "clamav-milter",
            "binary_version": "1.4.4+dfsg-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "clamav-testfiles",
            "binary_version": "1.4.4+dfsg-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "clamdscan",
            "binary_version": "1.4.4+dfsg-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libclamav12",
            "binary_version": "1.4.4+dfsg-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "clamav",
        "purl": "pkg:deb/ubuntu/clamav@1.4.4+dfsg-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.4+dfsg-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.103.3+dfsg-1",
        "0.103.4+dfsg-1",
        "0.103.4+dfsg-1build1",
        "0.103.5+dfsg-1",
        "0.103.6+dfsg-0ubuntu0.22.04.1",
        "0.103.8+dfsg-0ubuntu0.22.04.1",
        "0.103.9+dfsg-0ubuntu0.22.04.1",
        "0.103.11+dfsg-0ubuntu0.22.04.1",
        "0.103.12+dfsg-0ubuntu0.22.04.1",
        "1.4.3+dfsg-0ubuntu0.22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "clamav",
            "binary_version": "1.4.4+dfsg-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "clamav-base",
            "binary_version": "1.4.4+dfsg-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "clamav-daemon",
            "binary_version": "1.4.4+dfsg-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "clamav-docs",
            "binary_version": "1.4.4+dfsg-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "clamav-freshclam",
            "binary_version": "1.4.4+dfsg-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "clamav-milter",
            "binary_version": "1.4.4+dfsg-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "clamav-testfiles",
            "binary_version": "1.4.4+dfsg-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "clamdscan",
            "binary_version": "1.4.4+dfsg-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "libclamav12",
            "binary_version": "1.4.4+dfsg-0ubuntu0.24.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "clamav",
        "purl": "pkg:deb/ubuntu/clamav@1.4.4+dfsg-0ubuntu0.24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.4+dfsg-0ubuntu0.24.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.0.2+dfsg-1ubuntu1",
        "1.0.3+dfsg-2ubuntu1",
        "1.0.4+dfsg-0ubuntu1",
        "1.0.5+dfsg-1ubuntu1",
        "1.0.5+dfsg-1.1ubuntu2",
        "1.0.5+dfsg-1.1ubuntu3",
        "1.0.7+dfsg-0ubuntu0.24.04.1",
        "1.0.8+dfsg-0ubuntu0.24.04.1",
        "1.4.3+dfsg-0ubuntu0.24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "clamav",
            "binary_version": "1.4.4+dfsg-0ubuntu0.25.10.1"
          },
          {
            "binary_name": "clamav-base",
            "binary_version": "1.4.4+dfsg-0ubuntu0.25.10.1"
          },
          {
            "binary_name": "clamav-daemon",
            "binary_version": "1.4.4+dfsg-0ubuntu0.25.10.1"
          },
          {
            "binary_name": "clamav-docs",
            "binary_version": "1.4.4+dfsg-0ubuntu0.25.10.1"
          },
          {
            "binary_name": "clamav-freshclam",
            "binary_version": "1.4.4+dfsg-0ubuntu0.25.10.1"
          },
          {
            "binary_name": "clamav-milter",
            "binary_version": "1.4.4+dfsg-0ubuntu0.25.10.1"
          },
          {
            "binary_name": "clamav-testfiles",
            "binary_version": "1.4.4+dfsg-0ubuntu0.25.10.1"
          },
          {
            "binary_name": "clamdscan",
            "binary_version": "1.4.4+dfsg-0ubuntu0.25.10.1"
          },
          {
            "binary_name": "libclamav12",
            "binary_version": "1.4.4+dfsg-0ubuntu0.25.10.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "clamav",
        "purl": "pkg:deb/ubuntu/clamav@1.4.4+dfsg-0ubuntu0.25.10.1?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.4+dfsg-0ubuntu0.25.10.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.4.2+dfsg-0ubuntu1",
        "1.4.2+dfsg-0ubuntu2",
        "1.4.2+dfsg-1ubuntu1",
        "1.4.3+dfsg-0ubuntu1",
        "1.4.3+dfsg-0ubuntu2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "clamav",
            "binary_version": "1.4.4+dfsg-0ubuntu0.26.04.1"
          },
          {
            "binary_name": "clamav-base",
            "binary_version": "1.4.4+dfsg-0ubuntu0.26.04.1"
          },
          {
            "binary_name": "clamav-daemon",
            "binary_version": "1.4.4+dfsg-0ubuntu0.26.04.1"
          },
          {
            "binary_name": "clamav-docs",
            "binary_version": "1.4.4+dfsg-0ubuntu0.26.04.1"
          },
          {
            "binary_name": "clamav-freshclam",
            "binary_version": "1.4.4+dfsg-0ubuntu0.26.04.1"
          },
          {
            "binary_name": "clamav-milter",
            "binary_version": "1.4.4+dfsg-0ubuntu0.26.04.1"
          },
          {
            "binary_name": "clamav-testfiles",
            "binary_version": "1.4.4+dfsg-0ubuntu0.26.04.1"
          },
          {
            "binary_name": "clamdscan",
            "binary_version": "1.4.4+dfsg-0ubuntu0.26.04.1"
          },
          {
            "binary_name": "libclamav12",
            "binary_version": "1.4.4+dfsg-0ubuntu0.26.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "clamav",
        "purl": "pkg:deb/ubuntu/clamav@1.4.4+dfsg-0ubuntu0.26.04.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.4+dfsg-0ubuntu0.26.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.4.3+dfsg-0ubuntu2",
        "1.4.3+dfsg-0ubuntu3",
        "1.4.3+dfsg-2ubuntu1",
        "1.4.3+dfsg-2ubuntu2",
        "1.4.3+dfsg-2ubuntu3"
      ]
    }
  ],
  "aliases": [],
  "details": "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.",
  "id": "UBUNTU-CVE-2026-20031",
  "modified": "2026-05-20T15:24:36Z",
  "published": "2026-03-04T18:16:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-20031"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20031"
    },
    {
      "type": "REPORT",
      "url": "https://blog.clamav.net/2026/03/clamav-152-and-144-security-patch.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8207-1"
    }
  ],
  "related": [
    "USN-8207-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-20031"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-20031 (GCVE-0-2026-20031)

Solutions

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature