{"schema_version":"public-product-v1.1","generated_at":"2026-08-10T11:33:17Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","cve":{"id":"CVE-2026-20348","description":"A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in XAR files during scanning. An attacker could exploit this vulnerability by submitting a crafted file that contains XAR content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","severity":"HIGH","kev":false,"epss":{"score":0.00327,"percentile":0.25258,"score_date":"2026-08-09","updated_at":"2026-08-10T05:36:57Z"},"cvss_score":7.5,"cvss_source":"NVD","cwe":"CWE-120","published_at":"2026-08-07T17:17:03Z","modified_at":"2026-08-07T22:16:58Z"},"freshness":{"last_source_refreshed_at":"2026-08-10T05:36:57Z","latest_source_refresh_at":"2026-08-10T05:36:57Z","oldest_source_refresh_at":"2026-08-10T03:00:02Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-08-10T03:00:02Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-08-10T05:34:32Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-08-10T05:36:54Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-08-10T05:36:54Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-08-10T05:36:57Z","stale":false}]},"summary":{"advisory_count":1,"visible_product_count":6,"public_evidence_count":6,"kev":false,"cvss_score":7.5},"advisories":[{"id":"cisco-sa-clamav-WuuvVd26","slug":"cisco-sa-clamav-wuuvvd26","title":"ClamAV Vulnerabilities Affecting Cisco Products: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"}],"public_evidence":[{"product":{"name":"Cisco Secure Endpoint","slug":"cisco-secure-endpoint","vendor":"Cisco"},"advisory":{"id":"cisco-sa-clamav-WuuvVd26","slug":"cisco-sa-clamav-wuuvvd26","title":"ClamAV Vulnerabilities Affecting Cisco Products: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-08-08T03:58:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"1.10.0; 1.10.1; 1.10.2; 1.11.0; 1.11.1; 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; 1.12.6; 1.12.7; 1.13.0; 1.13.1; 1.13.2; 1.14.0; 1.14.1; 1.15.0; 1.15.1; 1.15.2; 1.15.3; 1.15.4; 1.15.5; 1.15.6; 1.16.0; 1.16.1; 1.16.2; 1.16.3; 1.17.0; 1.17.1; 1.17.2; 1.18.0; 1.18.1; 1.19.0; 1.20.0; 1.20.1; 1.20.2; 1.20.3; 1.20.4; 1.20.5; 1.20.6; 1.20.7; 1.20.8; 1.21.0; 1.21.1; 1.21.2; 1.21.3; 1.22.0; 1.22.1; 1.22.2; 1.22.3; 1.22.4; 1.23.0; 1.23.1; 1.24.0; 1.24.1; 1.24.2; 1.24.3; 1.24.4; 1.24.5; 1.25.0; 1.25.1; 1.25.2; 1.26.0; 1.26.1; 1.27.0; 1.27.1; 1.27.2; 1.6.0; 1.7.0; 1.8.0; 1.8.1; 1.8.4; 1.9.0; 1.9.1; 6.0.7; 6.0.9; 6.1.7; 6.1.9; 6.3.5; 6.3.7; 7.2.11; 7.2.13; 7.4.1.20425; 7.4.1.20439; 7.4.3; 7.4.3.20679; 7.4.5; 7.5.1.20813; 7.5.1.20833; 7.5.11; 7.5.13.21586; 7.5.13.21598; 7.5.15.21611; 7.5.17.21680; 7.5.19; 7.5.20; 7.5.21.21732; 7.5.7; 7.5.9; 8.0.1.21160; 8.0.1.21164; 8.1.3; 8.1.3.21242; 8.1.5.21322; 8.1.7.21417; 8.1.7.21512; 8.1.7.21585; 8.2.1.21612; 8.2.1.21650; 8.2.3.30119; 8.2.4.30130; 8.4.1.30298; 8.4.1.30307; 8.4.2.30317; 8.4.4.30419; 8.4.4.30467; 8.4.5.30483","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00327,"score_date":"2026-08-09","updated_at":"2026-08-10T05:36:57Z"},"cvss_score":7.5,"cvss_source":"NVD","published_at":"2026-08-07T16:00:00Z","updated_at":"2026-08-07T16:00:00Z","advisory_updated_at":"2026-08-07T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"row_display_order":1},{"product":{"name":"Cisco Adaptive Security Appliance (ASA) Software","slug":"cisco-adaptive-security-appliance-asa-software","vendor":"Cisco"},"advisory":{"id":"cisco-sa-clamav-WuuvVd26","slug":"cisco-sa-clamav-wuuvvd26","title":"ClamAV Vulnerabilities Affecting Cisco Products: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-08-08T03:58:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"6.1.5; 6.2.1; 6.2.3; 6.2.9; 6.3.1; 6.3.3; 7.0.5; 7.1.1; 7.2.3; 7.2.5; 8.1.5; 8.1.7; 8.4.3","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00327,"score_date":"2026-08-09","updated_at":"2026-08-10T05:36:57Z"},"cvss_score":7.5,"cvss_source":"NVD","published_at":"2026-08-07T16:00:00Z","updated_at":"2026-08-07T16:00:00Z","advisory_updated_at":"2026-08-07T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"row_display_order":2},{"product":{"name":"Cisco Firepower Management Center","slug":"cisco-firepower-management-center","vendor":"Cisco"},"advisory":{"id":"cisco-sa-clamav-WuuvVd26","slug":"cisco-sa-clamav-wuuvvd26","title":"ClamAV Vulnerabilities Affecting Cisco Products: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-08-08T03:58:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"7.2.7; 7.3.1; 7.4.1","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00327,"score_date":"2026-08-09","updated_at":"2026-08-10T05:36:57Z"},"cvss_score":7.5,"cvss_source":"NVD","published_at":"2026-08-07T16:00:00Z","updated_at":"2026-08-07T16:00:00Z","advisory_updated_at":"2026-08-07T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"row_display_order":3},{"product":{"name":"Cisco NX-OS Software","slug":"cisco-nx-os-software","vendor":"Cisco"},"advisory":{"id":"cisco-sa-clamav-WuuvVd26","slug":"cisco-sa-clamav-wuuvvd26","title":"ClamAV Vulnerabilities Affecting Cisco Products: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-08-08T03:58:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"6.2.19; 6.2.5; 7.1.5; 7.3.13; 7.3.9","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00327,"score_date":"2026-08-09","updated_at":"2026-08-10T05:36:57Z"},"cvss_score":7.5,"cvss_source":"NVD","published_at":"2026-08-07T16:00:00Z","updated_at":"2026-08-07T16:00:00Z","advisory_updated_at":"2026-08-07T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"row_display_order":4},{"product":{"name":"Cisco IOS XR Software","slug":"cisco-ios-xr-software","vendor":"Cisco"},"advisory":{"id":"cisco-sa-clamav-WuuvVd26","slug":"cisco-sa-clamav-wuuvvd26","title":"ClamAV Vulnerabilities Affecting Cisco Products: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-08-08T03:58:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"7.3.15; 7.3.3; 7.3.5; 7.5.3; 7.5.5","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00327,"score_date":"2026-08-09","updated_at":"2026-08-10T05:36:57Z"},"cvss_score":7.5,"cvss_source":"NVD","published_at":"2026-08-07T16:00:00Z","updated_at":"2026-08-07T16:00:00Z","advisory_updated_at":"2026-08-07T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"row_display_order":5},{"product":{"name":"Cisco RoomOS Software","slug":"cisco-roomos-software","vendor":"Cisco"},"advisory":{"id":"cisco-sa-clamav-WuuvVd26","slug":"cisco-sa-clamav-wuuvvd26","title":"ClamAV Vulnerabilities Affecting Cisco Products: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-08-08T03:58:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"8.4.0","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00327,"score_date":"2026-08-09","updated_at":"2026-08-10T05:36:57Z"},"cvss_score":7.5,"cvss_source":"NVD","published_at":"2026-08-07T16:00:00Z","updated_at":"2026-08-07T16:00:00Z","advisory_updated_at":"2026-08-07T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26"},"row_display_order":6}]}