There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute
    arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was
    discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET. (CVE-2025-8088)

  - A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker
    to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an
    affected device. This vulnerability is due to improper boundary checks for content in PESpin files during
    scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by
    submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A
    successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting
    in a DoS condition on the affected software. (CVE-2026-20339)

  - A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to
    cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an
    affected device. This vulnerability is due to improper handling of an endian conversion operation, which
    may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a
    crafted GPT file to be scanned by ClamAV on an affected device. A successful exploit could allow the
    attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected
    software. (CVE-2026-20345)

  - A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to
    cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an
    affected device. This vulnerability is due to improper boundary checks for content in PDF files during
    scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability
    by submitting a crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could
    allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the
    affected software. (CVE-2026-20346)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker     to cause a DoS condition or possibly other expanded impacts as a result ofmemory corruption on an     affected device. This vulnerability is due to improper boundary checks for content in PESpin files during     scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by     submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A     successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting     in a DoS condition on the affected software. (CVE-2026-20339)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of clamav1.4 installed on the remote host is prior to 1.4.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3894 advisory.

    A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker     to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an     affected device.

    This vulnerability is due to improper boundary checks for content in PESpin files during scanning, which     may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted     file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit     could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition     on the affected software. (CVE-2026-20339)

    A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected     device.

    This vulnerability is due to improper handling of an endian conversion operation, which may result in an     out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted GPT file     to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the     ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    (CVE-2026-20345)

    A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected     device.

    This vulnerability is due to improper boundary checks for content in PDF files during scanning, which may     result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a     crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the     attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected     software. (CVE-2026-20346)

    A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker     to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an     affected device.

    This vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which     may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a     crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the     attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected     software. (CVE-2026-20347)

    A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected     device.

    This vulnerability is due to improper boundary checks for content in XAR files during scanning. An     attacker could exploit this vulnerability by submitting a crafted file that contains XAR content to be     scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV     scanning process to terminate, resulting in a DoS condition on the affected software. (CVE-2026-20348)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2084 advisory.

    A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker     to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an     affected device.

    This vulnerability is due to improper boundary checks for content in PESpin files during scanning, which     may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted     file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit     could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition     on the affected software. (CVE-2026-20339)

    A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected     device.

    This vulnerability is due to improper handling of an endian conversion operation, which may result in an     out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted GPT file     to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the     ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    (CVE-2026-20345)

    A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected     device.

    This vulnerability is due to improper boundary checks for content in PDF files during scanning, which may     result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a     crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the     attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected     software. (CVE-2026-20346)

    A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker     to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an     affected device.

    This vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which     may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a     crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the     attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected     software. (CVE-2026-20347)

    A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected     device.

    This vulnerability is due to improper boundary checks for content in XAR files during scanning. An     attacker could exploit this vulnerability by submitting a crafted file that contains XAR content to be     scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV     scanning process to terminate, resulting in a DoS condition on the affected software. (CVE-2026-20348)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2116 advisory.

    A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker     to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an     affected device.

    This vulnerability is due to improper boundary checks for content in PESpin files during scanning, which     may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted     file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit     could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition     on the affected software. (CVE-2026-20339)

    A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected     device.

    This vulnerability is due to improper handling of an endian conversion operation, which may result in an     out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted GPT file     to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the     ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    (CVE-2026-20345)

    A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected     device.

    This vulnerability is due to improper boundary checks for content in PDF files during scanning, which may     result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a     crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the     attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected     software. (CVE-2026-20346)

    A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker     to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an     affected device.

    This vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which     may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a     crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the     attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected     software. (CVE-2026-20347)

    A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected     device.

    This vulnerability is due to improper boundary checks for content in XAR files during scanning. An     attacker could exploit this vulnerability by submitting a crafted file that contains XAR content to be     scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV     scanning process to terminate, resulting in a DoS condition on the affected software. (CVE-2026-20348)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, Cisco Secure Endpoint is affected by multiple denial of service vulnerabilities.

  - A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition on an affected device. This vulnerability is due to improper boundary checks for     content in zip files during scanning, which may result in an out-of-bounds write condition. An attacker     could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could     allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the     affected software. (CVE-2026-20337)

  - A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition on an affected device. This vulnerability is due to improper memory handling when     processing content in zip files during scanning. An attacker could exploit this vulnerability by     submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the     ClamAV scanning process to terminate as a result of a memory double-free, resulting in a DoS condition on     the affected software. (CVE-2026-20338)

  - A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker     to cause a DoS condition or possibly other expanded impacts as a result ofmemory corruption on an     affected device. This vulnerability is due to improper boundary checks for content in PESpin files during     scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by     submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A     successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting     in a DoS condition on the affected software. (CVE-2026-20339)

  - A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition or possibly other expanded impacts as a result ofmemory corruption on an     affected device. This vulnerability is due to improper boundary checks for content in XAR files during     scanning. An attacker could exploit this vulnerability by submitting a crafted file that contains XAR     content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to     cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
    (CVE-2026-20348)

  - A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to     cause a DoS condition or possibly other expanded impacts as a result ofmemory corruption on an     affected device. This vulnerability is due to improper handling of an endian conversion operation, which     may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a     crafted GPT file to be scanned by ClamAV on an affected device. A successful exploit could allow the     attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected     software. (CVE-2026-20345)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

ID	Name	Product	Family	Published	Updated	Severity
445862	Alpine: multiple clamav packages, multiple freshclam packages: security update to 1.4.6-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	8/12/2026	8/14/2026	high
445862	Alpine: multiple clamav packages, multiple freshclam packages: security update to 1.4.6-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	8/12/2026	8/14/2026	high
333538	Linux Distros Unpatched Vulnerability : CVE-2026-20339	Nessus	Misc.	8/8/2026	8/31/2026	high
341843	Amazon Linux 2 : clamav1.4, --advisory ALAS2-2026-3894 (ALAS-2026-3894)	Nessus	Amazon Linux Local Security Checks	8/31/2026	8/31/2026	high
342038	Amazon Linux 2023 : clamav1.4, clamav1.4-data, clamav1.4-devel (ALAS2023-2026-2084)	Nessus	Amazon Linux Local Security Checks	8/31/2026	8/31/2026	high
342046	Amazon Linux 2023 : clamav1.5, clamav1.5-data, clamav1.5-devel (ALAS2023-2026-2116)	Nessus	Amazon Linux Local Security Checks	8/31/2026	8/31/2026	high
335452	Cisco Secure Endpoint Multiple ClamAV DoS (cisco-sa-clamav-WuuvVd26)	Nessus	CISCO	8/14/2026	8/17/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high