CVE-2026-20216

HIGH

Cisco Secure Endpoint - ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability

Title source: rule

Description

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.

References (1)

Core 1

Core References

cisco-sa-clamav-88cFYyxR

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR

Scores

CVSS v3 7.5

EPSS 0.0039

EPSS Percentile 31.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-770

Status published

Products (50)

Cisco/Cisco Secure Endpoint 1.10.0

Cisco/Cisco Secure Endpoint 1.10.1

Cisco/Cisco Secure Endpoint 1.10.2

Cisco/Cisco Secure Endpoint 1.11.0

Cisco/Cisco Secure Endpoint 1.11.1

Cisco/Cisco Secure Endpoint 1.12.0

Cisco/Cisco Secure Endpoint 1.12.1

Cisco/Cisco Secure Endpoint 1.12.2

Cisco/Cisco Secure Endpoint 1.12.3

Cisco/Cisco Secure Endpoint 1.12.4

... and 40 more

Published Jul 01, 2026

Tracked Since Jul 01, 2026