Russia-aligned actors exploit MDaemon flaw to plant backdoors with no clicks
ESET says MDaemon before 26.0.4 runs CVE-2025-8088 while scanning a malicious RAR, dropping HELLAGE or HELLTAG DLLs in Ukraine.
74
Vendor
ClamAV
- Mentions · 7d1
- Mentions · 30d1
- All mentions4
- First seenAug 13, 2026
- Last mentioned2h ago
Timeline
4 articles · newest firstUSN-8788-1: ClamAV vulnerabilities
ClamAV contains multiple denial-of-service vulnerabilities allowing remote crashes via crafted archive and document files.
45
ClamAV Vulnerabilities Affecting Cisco Products: August 2026
Cisco patched ClamAV vulnerabilities that allow remote attackers to cause denial-of-service conditions, rated High only for Windows-based platforms.
35
ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability
Zero Day Initiative discloses CVE-2026-20215, an integer overflow in ClamAV's 7z archive parsing enabling remote code execution, rated CVSS 8.4.
48
Related CVEs
by mentions- CVE-2025-808894%8.4WinRAR Path Traversal (CVE-2025-8088) Enables Arbitrary Code Execution
- CVE-2026-20215<1%7.5A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded…
- CVE-2026-20337<1%7.5A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device
- CVE-2026-20338<1%7.5A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device
- CVE-2026-20339<1%7.5A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded…
- CVE-2026-20345<1%7.5A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded…
Appears with
- ClamAVproduct · 2
- ESETorganization · 1
- Ubuntuorganization · 1
- WinRARproduct · 1
- Cisco productsproduct · 1
- HELLAGEmalware · 1
- Ciscovendor · 1
- CERT-UAorganization · 1
- MDaemonvendor · 1
- Zero Day Initiativeorganization · 1
- Clam AntiVirusproduct · 1
- HELLTAGmalware · 1
- ClamAVmalware · 1
- Zero Day Initiativevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.