CVE-2026-20214
CVE-2026-20214: 3 tracked advisory records across Cisco, Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Cisco
2 advisories- Advisory severityHigh7.5
High [CVE-2026-20213 +6] ClamAV Vulnerabilities Affecting Cisco Products: July 2026
cisco-sa-clamav-88cFYyxRSource published Source updated
This bulletin covers 7 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
Multiple vulnerabilities in ClamAV could allow a remote attacker to cause a denial of service (DoS) condition, interrupting scanning operations. For more information about these vulnerabilities, see the Details section of this advisory. For additional information on these vulnerabilities in ClamAV, see the ClamAV blog. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. Notes: - The Security Impact Rating (SIR) for these vulnerabilities is High for Windows-based platforms only because those platforms run the ClamAV scanning process in a privileged security context. The platforms that are highly impacted include Cisco Secure Endpoint Connector for Windows. - The SIR for these vulnerabilities is Medium on…
- Related products — impact not confirmed
- Secure Web Appliance
- Secure Email
- Secure Endpoint
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- 1.29.01
- 1.27.21
- 8.6.21
- 4.2.8 and later2
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
- Workarounds
- There are no workarounds that address these vulnerabilities.
- Advisory severityHigh
High [CVE-2026-20191 +7] Cisco Advance Notification for Publication of July 1, 2026, Security Advisories
cisco-sa-notice-vwL7b0S7Source published Source updated
This bulletin covers 8 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
On July 1, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE-ID Security Impact Rating CVSS Base Score Cisco Catalyst Center Arbitrary File Read Vulnerability CVE-2026-20191 High 7.5 ClamAV Vulnerabilities Affecting Cisco Products: July 2026 CVE-2026-20216 CVE-2026-20213 CVE-2026-20214 CVE-2026-20215 CVE-2026-20217 CVE-2026-20243 To fully remediate the vulnerabilities that were disclosed on July 1, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories. For more information about changes in Cisco PSIRT vulnerability…
- Affected products in this advisory
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Red Hat
1 advisory- Advisory severityHigh7.5
High [CVE-2026-20214] Denial of Service via crafted FSG file parsing
CVE-2026-20214Source published Source updated
A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains portable executable content compressed with FSG to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software. A flaw was found in ClamAV. An unauthenticated, remote attacker could exploit a vulnerability…
- Affected products in this advisory
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- To reduce the attack surface, restrict network access to the ClamAV daemon (clamd) to trusted clients only. This can be achieved by configuring firewall rules to limit connections to the port clamd listens on. For example, using `firewalld`: `firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="<TRUSTED_IP_ADDRESS>" port port="3310" protocol="tcp" accept'` `firewall-cmd --reload` Replace `<TRUSTED_IP_ADDRESS>` with the IP address or network range of trusted clients. This mitigation may impact legitimate scanning operations if not configured correctly. A restart of the `clamd` service may be required for changes to take full effect.
Android app · Google Play
Turn CVE research into alerts on your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.