Alert GCSA-26266 - Aggiornamento di sicurezza per prodotti Ivanti - ottobre 2026

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26266 data: 14 ottobre 2026 titolo: Aggiornamento di sicurezza per prodotti Ivanti - ottobre 2026 ****************************************************************** :: Descrizione del problema Ivanti ha rilasciato aggiornamenti di sicurezza che risolvono 7 vulnerabilita' in alcuni prodotti; 2 hanno gravita' "critica", e 3 gravita' "alta". E' stato rilevato lo sfruttamento attivo in rete della seguente vulnerabilita': CVE-2026-104935 (CVSS3.1 score 8,6) riguarda Ivanti Connect Secure (ICS) ed e' di tipo "Authentication Bypass by Spoofing". Ivanti esorta i clienti ad aggiornare subito i dispositivi e a verificare eventuali compromissioni. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Ivanti Connect Secure (ICS) versione 25.1.1.1 e precedenti Ivanti Connect Secure (ICS) versione 25.1.2.2 e precedenti Ivanti Connect Secure (ICS) versione 22.8R2.4 e precedenti Ivanti Xtraction versione 2026.2.1 e precedenti Ivanti Neurons for UEM :: Impatto Esecuzione remota di comandi o codice arbitrario (RCE) Bypass delle funzionalita' di sicurezza (SFB) Authentication Bypass Rivelazione di informazioni (ID) :: Soluzioni Aggiornare i prodotti alle versioni piu' recenti. Ivanti Connect Secure (ICS) versione 25.1.1.2 Ivanti Connect Secure (ICS) versione 25.1.3.0, 25.1.3.1 Ivanti Connect Secure (ICS) versione 22.8R2.5 Ivanti Connect Secure (ICS) 25.1.3.0 release notes (July 2026) https://help.ivanti.com/ps/help/en_US/ICS/25.1.x/25.1.3.0/25.xICSRN.pdf Ivanti Connect Secure 25.x Upgrade and Migration Compatibility Guide https://hub.ivanti.com/s/article/Ivanti-Connect-Secure-25-x-Upgrade-and-Migration-Compatibility-Guide Ivanti Xtraction versione 2026.4 Ivanti Neurons for UEM (servizio cloud aggiornato automaticamente il 16 settembre u.s.) :: Riferimenti Ivanti August 2026 Security Update https://www.ivanti.com/blog/october-2026-security-update Ivanti Security Advisory https://hub.ivanti.com/s/searchallcontent?language=en_US#sortCriteria=date%20descending&f-sfkbknowledgearticletypec=Security%20Advisory https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935 https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-Patch-for-Intune-October-2026 Chained Exploitation of Ivanti Connect Secure Zero-Days https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/ How to Use the Built-in Integrity Checker Tool https://hub.ivanti.com/s/article/KB44859?language=en_US Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS) Recovery Procedures https://hub.ivanti.com/s/article/Recovery-Steps Bleeping Computer https://www.bleepingcomputer.com/news/security/ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks/ The Hacker News https://thehackernews.com/2026/10/attacker-chains-three-ivanti-connect.html SecurityWeek https://www.securityweek.com/ivanti-zero-day-chain-gave-attackers-root-access-to-fully-patched-vpn/ CISA Alert https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure CVE ID I riferimenti CVE sono disponibili nell'advisory originale. GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCas+EUgAKCRDBnEyTZRJg QsnyAJ4ijQbBN8zTlyPPkMTTbTN+Fham3QCfWoogCGkP2FxpSyQPG0XMsXTNp+E= =rfg5 -----END PGP SIGNATURE-----