Alert GCSA-26202 - Vulnerabilita' critiche in prodotti Cisco

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26202 data: 3 settembre 2026 titolo: Vulnerabilita' critiche in prodotti Cisco ****************************************************************** :: Descrizione del problema Il team Cisco PSIRT ha pubblicato vari aggiornamenti di sicurezza, che risolvono 11 vulnerabilita', 8 delle quali hanno gravita' "critica". Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Apparati e software interessati Cisco IOS XR Software Cisco Nexus 9000 Series Switches Silicon One Cisco Desk Phone 9800, 7800 and 8800, and 8875 Series Software Cisco Secure Email (Cisco AsyncOS Software) Per una descrizione completa dei dispositivi interessati, si prega di far riferimento ai Security Advisories ufficiali. :: Impatto Denial of Service (DoS) Esecuzione remota di codice arbitrario (RCE) Bypass delle funzionalita' di sicurezza (SFB) Accesso a dati riservati (ID) Attacco all'integrita' dei dati (Data Manipulation) :: Soluzioni Aggiornare i prodotti alla versioni piu' recenti. https://www.cisco.com/c/en/us/support/index.html Si consiglia di valutare l'impatto delle vulnerabilita' sui dispositivi in uso, e di aggiornare il prima possibile. E' possibile utilizzare Cisco Software Checker https://sec.cloudapps.cisco.com/security/center/softwarechecker.x per determinare il patching appropriato. Prima dell'installazione del software consultare il sito del fornitore per maggiori dettagli. :: Riferimenti Cisco Security Advisories https://sec.cloudapps.cisco.com/security/center/publicationListing.x Cisco Advance Notification for Publication of September 2, 2026, Security Advisories https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-f2SiMFxl Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9k-s1-rce-EH8dEtr Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-txMYNRzv Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-smime-disc-dzw4rEdY CVE List https://www.cve.org/CVERecord?id=CVE-2026-20277 https://www.cve.org/CVERecord?id=CVE-2026-20278 https://www.cve.org/CVERecord?id=CVE-2026-20280 https://www.cve.org/CVERecord?id=CVE-2026-20279 https://www.cve.org/CVERecord?id=CVE-2026-20276 https://www.cve.org/CVERecord?id=CVE-2026-20275 https://www.cve.org/CVERecord?id=CVE-2026-20274 https://www.cve.org/CVERecord?id=CVE-2026-20212 https://www.cve.org/CVERecord?id=CVE-2026-20281 https://www.cve.org/CVERecord?id=CVE-2026-20355 https://www.cve.org/CVERecord?id=CVE-2026-20354 GARR CERT Security Alert - subscribe/unsubscribe: https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaplPEgAKCRDBnEyTZRJg Qr8bAKDgi5HftF/PHyzP9NTunvSsEem1owCfZePcKLpDHz1lZwdebqzmstKX6xQ= =32pO -----END PGP SIGNATURE-----