Tag
#Cisco
Understanding the Actively Exploited Zero-Day in Cisco Secure Email Gateways
Cisco has warned customers of an actively exploited zero-day vulnerability in its Secure Email Gateways. The company confirmed that the defect was exploited before it was disclosed and patched. This vulnerability poses a significant risk to organizations using these gateways, as it could allow attackers to compromise email security.
Understanding and Defending Against CVE-2026-20345: ClamAV GPT File Format Parser Vulnerability
CVE-2026-20345 is a high-severity vulnerability in the GPT file format parser of ClamAV, a popular open-source antivirus engine. This vulnerability allows an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition or potentially lead to memory corruption on an affected device. The vulnerability is due to improper handling of an endian conversion operation, which may result in an out-of-bounds buffer write. This analysis will delve into the root cause, attack surface, exploitation mechanics, real-world impact, detection strategies, and defensive measures for this critical vulnerability.