Findings

CVE-2025-26790

Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by…

Published Sep 14, 2026 · updated Oct 14, 2026

Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antivirus engine.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 14, 2026 · NIST NVD

    Detected

    Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antivirus engine.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antivirus engine.

Sources

  • CVE.orgVulnerability recordCVE-2025-26790

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-26790

    30-day exploitation probability 0.3%

    first.org
  • NIST NVDVulnerability recordCVE-2025-26790

    Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antivirus engine.

    nvd.nist.gov

References

CVE-2025-26790 · ZeroDay Findings