https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:30:06.011176+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0241 certfr-2026-avi-0241 — Une vulnérabilité a été découverte dans ClamAV. Elle permet à un attaquant de provoquer un déni de service. 2026-10-04T04:30:06.063761+00:00 certfr-2026-avi-0241 https://cve.radiocsirt.org/vuln/cisco-sa-clamav-css-fn4qsz cisco-sa-clamav-css-Fn4QSZ — ClamAV Cascading Style Sheets Image Parsing Error Handling Denial of Service Vulnerability 2026-10-04T04:30:06.063809+00:00

A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

 https://cve.radiocsirt.org/vuln/euvd-2026-274639 EUVD-2026-274639 2026-10-04T04:30:06.063844+00:00 EUVD-2026-274639 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20031 fkie_cve-2026-20031 2026-10-04T04:30:06.063857+00:00

A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.

 https://cve.radiocsirt.org/vuln/ghsa-hvpm-hv6g-6m5c GHSA-hvpm-hv6g-6m5c 2026-10-04T04:30:06.063882+00:00

A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0077 NCSC-2026-0077 — Kwetsbaarheden verholpen in Cisco Secure Firewall systemen 2026-10-04T04:30:06.063901+00:00 NCSC-2026-0077 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10325-1 openSUSE-SU-2026:10325-1 — clamav-1.5.2-1.1 on GA media 2026-10-04T04:30:06.063969+00:00

clamav-1.5.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:1324-1 SUSE-SU-2026:1324-1 — Security update for clamav 2026-10-04T04:30:06.063986+00:00

Security update for clamav

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-20031 UBUNTU-CVE-2026-20031 2026-10-04T04:30:06.064000+00:00

Affected: Ubuntu:Pro:14.04:LTS: clamav, Ubuntu:Pro:16.04:LTS: clamav, Ubuntu:Pro:18.04:LTS: clamav, Ubuntu:Pro:20.04:LTS: clamav, Ubuntu:22.04:LTS: clamav, Ubuntu:24.04:LTS: clamav, Ubuntu:25.10: clamav, Ubuntu:26.04:LTS: clamav

A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0593 WID-SEC-W-2026-0593 — ClamAV: Schwachstelle ermöglicht Denial of Service 2026-10-04T04:30:06.064033+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ClamAV ausnutzen, um einen Denial of Service Angriff durchzuführen.