{"schema_version":"public-product-v1.1","generated_at":"2026-08-10T11:31:25Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","cve":{"id":"CVE-2026-20345","description":"A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper handling of an endian conversion operation, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted GPT file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","severity":"HIGH","kev":false,"epss":{"score":0.00327,"percentile":0.25256,"score_date":"2026-08-09","updated_at":"2026-08-10T05:36:57Z"},"cvss_score":7.5,"cvss_source":"NVD","cwe":"CWE-121","published_at":"2026-08-07T17:17:03Z","modified_at":"2026-08-07T22:16:57Z"},"freshness":{"last_source_refreshed_at":"2026-08-10T05:36:57Z","latest_source_refresh_at":"2026-08-10T05:36:57Z","oldest_source_refresh_at":"2026-08-10T03:00:02Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-08-10T03:00:02Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-08-10T05:34:32Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-08-10T05:36:54Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-08-10T05:36:54Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-08-10T05:36:57Z","stale":false}]},"summary":{"advisory_count":1,"visible_product_count":2,"public_evidence_count":2,"kev":false,"cvss_score":7.5},"advisories":[{"id":"cisco-sa-clamav-WuuvVd26","slug":"cisco-sa-clamav-wuuvvd26","title":"ClamAV Vulnerabilities Affecting Cisco Products: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"}],"public_evidence":[{"product":{"name":"Cisco Secure Endpoint","slug":"cisco-secure-endpoint","vendor":"Cisco"},"advisory":{"id":"cisco-sa-clamav-WuuvVd26","slug":"cisco-sa-clamav-wuuvvd26","title":"ClamAV Vulnerabilities Affecting Cisco Products: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-08-08T03:58:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"1.1.0; 1.10.0; 1.10.1; 1.10.2; 1.11.0; 1.11.1; 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; 1.12.6; 1.13.1; 1.14.0; 1.15.2; 1.16.0; 1.17.1; 1.19.0; 1.21.0; 1.22.2; 1.24.3; 1.24.5; 1.6.0; 1.7.0; 1.8.0; 1.8.1; 1.8.4; 1.9.0; 1.9.1; 2.8.0","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00327,"score_date":"2026-08-09","updated_at":"2026-08-10T05:36:57Z"},"cvss_score":7.5,"cvss_source":"NVD","published_at":"2026-08-07T16:00:00Z","updated_at":"2026-08-07T16:00:00Z","advisory_updated_at":"2026-08-07T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"row_display_order":1},{"product":{"name":"Cisco Catalyst SD-WAN Manager","slug":"cisco-catalyst-sd-wan-manager","vendor":"Cisco"},"advisory":{"id":"cisco-sa-clamav-WuuvVd26","slug":"cisco-sa-clamav-wuuvvd26","title":"ClamAV Vulnerabilities Affecting Cisco Products: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-08-08T03:58:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"2.0.2; 2.4.0","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00327,"score_date":"2026-08-09","updated_at":"2026-08-10T05:36:57Z"},"cvss_score":7.5,"cvss_source":"NVD","published_at":"2026-08-07T16:00:00Z","updated_at":"2026-08-07T16:00:00Z","advisory_updated_at":"2026-08-07T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"row_display_order":2}]}