Alert GCSA-26197 - Vulnerabilita' in prodotti WatchGuard

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26197 data: 29 agosto 2026 titolo: Vulnerabilita' in prodotti WatchGuard ****************************************************************** :: Descrizione del problema WatchGuard ha rilasciato nuove versioni dei suoi prodotti con le quali risolve 30 vulnerabilita', 7 delle quali di livello "critico" e 12 di livello "alto." Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato WatchGuard Fireware OS Default tutte le versioni 2025.x WatchGuard Fireware OS Default versioni precedenti alla 2026.2.2 WatchGuard Fireware OS Default versioni precedenti alla 12.12.2 WatchGuard Fireware OS T15/T35 versioni precedenti alla 12.5.20 WatchGuard Dimension versioni precedenti alla 2.3.1 WatchGuard Agent versioni precedenti alla 1.25.13.0000 :: Impatto Denial of Service (DoS) Bypass delle funzionalita' di sicurezza (SFB) Esecuzione remota di codice arbitrario (RCE) Server-side request forgery (SSRF) Cross-site Scripting (XSS) SQL Injection (SQLi) :: Soluzioni Applicare gli aggiornamenti rilasciati dal produttore. Upgrade Fireware or WatchGuard System Manager https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/installation/version_upgrade_new_c.html Manage Firmware Versions for Devices in WatchGuard Cloud https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/Devices/sub_upgrade-firmware.html Per scaricare il software relativo al modello di Firebox https://software.watchguard.com/ :: Riferimenti WatchGuard Security Advisories https://psirt.watchguard.com/ CVE ID Severity Critical https://www.cve.org/CVERecord?id=CVE-2026-19315 https://www.cve.org/CVERecord?id=CVE-2026-13086 https://www.cve.org/CVERecord?id=CVE-2026-19318 https://www.cve.org/CVERecord?id=CVE-2026-19313 https://www.cve.org/CVERecord?id=CVE-2026-78174 https://www.cve.org/CVERecord?id=CVE-2026-57910 https://www.cve.org/CVERecord?id=CVE-2026-57909 Severity High https://www.cve.org/CVERecord?id=CVE-2026-78011 https://www.cve.org/CVERecord?id=CVE-2026-19314 https://www.cve.org/CVERecord?id=CVE-2026-19317 https://www.cve.org/CVERecord?id=CVE-2026-78010 https://www.cve.org/CVERecord?id=CVE-2026-78009 https://www.cve.org/CVERecord?id=CVE-2026-19316 https://www.cve.org/CVERecord?id=CVE-2026-78008 https://www.cve.org/CVERecord?id=CVE-2026-78612 https://www.cve.org/CVERecord?id=CVE-2026-78613 https://www.cve.org/CVERecord?id=CVE-2026-78610 https://www.cve.org/CVERecord?id=CVE-2026-13108 https://www.cve.org/CVERecord?id=CVE-2026-78614 Severity Medium https://www.cve.org/CVERecord?id=CVE-2026-81851 https://www.cve.org/CVERecord?id=CVE-2026-78616 https://www.cve.org/CVERecord?id=CVE-2026-78498 https://www.cve.org/CVERecord?id=CVE-2026-78615 https://www.cve.org/CVERecord?id=CVE-2026-78103 https://www.cve.org/CVERecord?id=CVE-2026-78495 https://www.cve.org/CVERecord?id=CVE-2026-78617 https://www.cve.org/CVERecord?id=CVE-2026-78047 https://www.cve.org/CVERecord?id=CVE-2026-78499 https://www.cve.org/CVERecord?id=CVE-2026-78618 https://www.cve.org/CVERecord?id=CVE-2026-78500 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCapMtNgAKCRDBnEyTZRJg Qk2fAKCTkKtSwu2u0Esy3bPaDMeU4Rsa7QCfReyHKO6PJf/I4AUwcSt5zo9Id68= =PbIM -----END PGP SIGNATURE-----