Cisco has released security updates to patch a ClamAV denial-of-service (DoS) vulnerability, which has proof-of-concept (PoC) exploit code. Tracked as CVE-2025-20128, the vulnerability is caused ...
The manufacturer has also closed vulnerabilities in Broadworks and ClamAV with security updates. The vulnerability stems from the fact that proper authorization of REST API users is not enforced.