CVE-2026-20216: cisco secure endpoint +1 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2026-20216

CVSS 7.5 · High EPSS 0,57%

Kerentanan Allocation of Resources Without Limits or Throttling pada cisco secure endpoint, clamav. Skor CVSS 3.1 7.5 (High) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.

Rincian

Terbit di NVD: 1 Juli 2026
Terakhir diubah: 9 Juli 2026
Status NVD: Analyzed
CVSS 3.1: 7.5 (High), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-770: Allocation of Resources Without Limits or Throttling
EPSS (30 hari): 0,57% peluang dieksploitasi; lebih tinggi dari 45,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
cisco	secure endpoint	Semua versi sebelum 1.27.2
cisco	secure endpoint	Semua versi sebelum 1.29.0
cisco	secure endpoint	Semua versi sebelum 8.6.2
clamav	clamav	Semua versi sebelum 1.4.5
clamav	clamav	Versi 1.5.0 hingga sebelum 1.5.3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.