# ClamAV multiple vulnerabilities denial of service

Published: 2026-07-02 · Severity: routine
Canonical: https://vorant.io/reports/d45a2f43-3de4-54ed-a854-526dfa385eda/clamav-multiple-vulnerabilities-denial-of-service

> Multiple vulnerabilities in ClamAV 1.4.x and 1.5.x enable denial of service; patch to 1.4.5 or 1.5.3.

CERT-FR has published an advisory covering multiple vulnerabilities discovered in ClamAV antivirus engine. The affected versions are ClamAV 1.4.x prior to 1.4.5 and 1.5.x prior to 1.5.3. The vulnerabilities allow an attacker to cause denial of service conditions and an unspecified security issue not detailed by the vendor. ClamAV is widely deployed as an open-source antivirus and malware scanning engine used in mail gateways, file servers, and endpoint protection across many organizations. Defenders running vulnerable versions should prioritize updating to patched releases immediately. The French CERT advisory references eight CVE identifiers indicating multiple distinct flaws requiring remediation.

## Mentioned in this report

- Vulnerabilities: CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244, CVE-2026-41676

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0824

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/d45a2f43-3de4-54ed-a854-526dfa385eda/clamav-multiple-vulnerabilities-denial-of-service.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup