Cisco security patch release for CVE-2026-20337
Security Patch Release
Summary
Hide ▲
Show ▼
Cisco released ClamAV 1.5.4 to fix CVE-2026-20337 and CVE-2026-20338, reducing denial-of-service risk for deployments running ClamAV 1.5.0 through 1.5.3. The update closes ZIP archive parser flaws that can let an unauthenticated attacker crash the scanning process by submitting a crafted zip file. Cisco said Secure Endpoint Connector updates for Windows, Linux, and Mac will follow later this month. The company also said there are no workarounds for the two bugs, although it has no evidence of in-the-wild exploitation.
Related Happenings
Apple macOS security update for CVE-2026-65400
Security Patch Release
H score89
First: 14.08.2026 17:59
Last: 14.08.2026 17:59
Sources 1
About this happening:
Apple released fixes for CVE-2026-65400 in macOS Tahoe 26.6.1 and related releases, closing a Screen Sharing authentication bypass that could let network attackers...
Apple macOS security update for CVE-2026-65400
Security Patch ReleaseAbout this happening: Apple released fixes for CVE-2026-65400 in macOS Tahoe 26.6.1 and related releases, closing a Screen Sharing authentication bypass that could let network attackers...
Cisco security patch release for CVE-2026-20303
Security Patch Release
H score43
First: 06.08.2026 20:13
Last: 06.08.2026 20:13
Sources 1
About this happening:
Cisco rolled out updates for Cisco Catalyst SD-WAN Software to fix five critical CVEs across affected releases, including CVE-2026-20303 and CVE-2026-20304. Th...
Cisco security patch release for CVE-2026-20303
Security Patch ReleaseAbout this happening: Cisco rolled out updates for Cisco Catalyst SD-WAN Software to fix five critical CVEs across affected releases, including CVE-2026-20303 and CVE-2026-20304. Th...
Google’s Chrome security team security patch release for CVE-2026-17650
Security Patch Release
H score16
First: 30.07.2026 12:15
Last: 30.07.2026 12:15
Sources 1
About this happening:
Google released Chrome 151 security patches for Windows, Mac, and Linux, fixing 370 vulnerabilities and seven critical issues. The update includes CVEs CVE-2026-...
Google’s Chrome security team security patch release for CVE-2026-17650
Security Patch ReleaseAbout this happening: Google released Chrome 151 security patches for Windows, Mac, and Linux, fixing 370 vulnerabilities and seven critical issues. The update includes CVEs CVE-2026-...
Cisco Unified Communications Manager security update for CVE-2026-20230
Security Patch Release
H score56
First: 04.06.2026 14:09
Last: 04.06.2026 14:09
Sources 1
About this happening:
Cisco released security updates for Cisco Unified Communications Manager (Unified CM) to fix CVE-2026-20230, a critical flaw that could let a remote attacker reach...
Cisco Unified Communications Manager security update for CVE-2026-20230
Security Patch ReleaseAbout this happening: Cisco released security updates for Cisco Unified Communications Manager (Unified CM) to fix CVE-2026-20230, a critical flaw that could let a remote attacker reach...
Cisco Secure Workload REST API patch release (CVE-2026-20223)
Security Patch Release
H score55
First: 22.05.2026 08:36
Last: 22.05.2026 08:36
Sources 1
About this happening:
Cisco patched CVE-2026-20223, a CVSS 10.0 Secure Workload REST API flaw that could expose sensitive data and allow configuration changes across tenant boundaries. The upda...
Cisco Secure Workload REST API patch release (CVE-2026-20223)
Security Patch ReleaseAbout this happening: Cisco patched CVE-2026-20223, a CVSS 10.0 Secure Workload REST API flaw that could expose sensitive data and allow configuration changes across tenant boundaries. The upda...
Timeline
-
11.08.2026 14:03 2 articles · 13d ago
Cisco security patch release for CVE-2026-20337
Initial DisclosureCisco released ClamAV 1.5.4 on August 7 to address two high-severity DoS flaws in the ZIP archive parser and announced later-month remediation for Secure Endpoint Connector on Windows, Linux, and Mac.
Show sources
- Cisco warns of high-severity ClamAV flaws with public exploits — www.bleepingcomputer.com — 11.08.2026 14:03
- Cisco warns of high-severity ClamAV flaws with public exploits — www.bleepingcomputer.com — 11.08.2026 14:03