Alert GCSA-26285 - Vulnerabilita' critiche in prodotti Cisco

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26285 data: 22 ottobre 2026 titolo: Vulnerabilita' critiche in prodotti Cisco ****************************************************************** :: Descrizione del problema Il team Cisco PSIRT ha pubblicato 14 bollettini di sicurezza per risolvere 34 vulnerabilita', delle quali 6 di livello "critico" e 4 di livello "alto". In relazione alla vulnerabilita' PHP2Shell, il produttore ha pubblicato un avviso col quale informa che: "Cisco sta studiando la sua linea di prodotti per determinare quali prodotti e servizi cloud potrebbero essere interessati da queste vulnerabilita'. Con il progredire dell'indagine, Cisco aggiornera' questo advisory con informazioni su prodotti e servizi interessati." https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Apparati e software interessati Snort 3 versioni precedenti alla 3.12.4.0 (CDFW, Cyber Vision, Meraki MX, CSA, FTD, UTD) Cisco IOS XR Software for ASR 9000 Series Routers Cisco Secure Client versioni precedenti alla 5.1.20.333 Cisco Cyber Vision versioni precedenti alla 5.6.0 Cisco Secure Firewall Threat Defense (FTD) Software Cisco Expressway versioni precedenti alla X15.5.20 Cisco Unified Communications Products versioni precedenti alla 15SU5 Emergency Responder Prime Collaboration Deployment Unified Communications Manager (CM) Unified Communications Manager IM & Presence Service (CM IM&P) Unified Communications Manager Session Management Edition (CM SME) Unity Connection Per una descrizione completa dei dispositivi interessati, si prega di far riferimento ai Security Advisories ufficiali. :: Impatto Denial of Service (DoS) Authentication Bypass Esecuzione remota di codice arbitrario (RCE) Acquisizione di privilegi piu' elevati (EoP) Cross Site Scripting (XSS) Rivelazione di informazioni (ID) :: Soluzioni Aggiornare i prodotti alla versioni piu' recenti. https://www.cisco.com/c/en/us/support/index.html Si consiglia di valutare l'impatto delle vulnerabilita' sui dispositivi in uso, e di aggiornare il prima possibile. E' possibile utilizzare Cisco Software Checker https://sec.cloudapps.cisco.com/security/center/softwarechecker.x per determinare il patching appropriato. Prima dell'installazione del software consultare il sito del fornitore per maggiori dettagli. :: Riferimenti Cisco Security Advisories https://sec.cloudapps.cisco.com/security/center/publicationListing.x Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq Cisco Advance Notification for Publication of October 21, 2026, Security Advisories https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-QGwHnJ6k Snort 3 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-snort3-ybgmhTQe https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-opensrc-snort3-2fXGJPfe https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-misc-dos-6mB22qAK https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-gre-JNpMHrTv https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-mime-vulns-bkXjcKkt https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-vba-bufdos-jAuFdvn9 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-gtpcodec-dos-Rmecfepz Cisco Expressway and Unified Communications Products https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vcs-static-cred-hr7EWZ8t https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-inf-disc-vvYqgSTS https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-access-PW9e8Jt2 Cisco IOS XR Software and Secure Client https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr9k-tUyxcyXN https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-client-priv-esc-muF8eZdm CVE List https://www.cve.org/CVERecord?id=CVE-2026-20043 https://www.cve.org/CVERecord?id=CVE-2026-20236 https://www.cve.org/CVERecord?id=CVE-2026-20291 https://www.cve.org/CVERecord?id=CVE-2026-20356 https://www.cve.org/CVERecord?id=CVE-2026-76524 https://www.cve.org/CVERecord?id=CVE-2026-76489 https://www.cve.org/CVERecord?id=CVE-2026-20019 https://www.cve.org/CVERecord?id=CVE-2026-20179 https://www.cve.org/CVERecord?id=CVE-2026-20197 https://www.cve.org/CVERecord?id=CVE-2026-20221 https://www.cve.org/CVERecord?id=CVE-2026-20011 https://www.cve.org/CVERecord?id=CVE-2026-20218 https://www.cve.org/CVERecord?id=CVE-2026-76445 https://www.cve.org/CVERecord?id=CVE-2026-76466 https://www.cve.org/CVERecord?id=CVE-2026-76490 https://www.cve.org/CVERecord?id=CVE-2026-76491 https://www.cve.org/CVERecord?id=CVE-2026-76492 https://www.cve.org/CVERecord?id=CVE-2026-76493 https://www.cve.org/CVERecord?id=CVE-2026-76494 https://www.cve.org/CVERecord?id=CVE-2026-76495 https://www.cve.org/CVERecord?id=CVE-2026-76496 https://www.cve.org/CVERecord?id=CVE-2026-76497 https://www.cve.org/CVERecord?id=CVE-2026-76435 https://www.cve.org/CVERecord?id=CVE-2026-76476 https://www.cve.org/CVERecord?id=CVE-2026-76473 https://www.cve.org/CVERecord?id=CVE-2026-76475 https://www.cve.org/CVERecord?id=CVE-2026-76477 https://www.cve.org/CVERecord?id=CVE-2026-76478 https://www.cve.org/CVERecord?id=CVE-2026-76479 https://www.cve.org/CVERecord?id=CVE-2026-76481 https://www.cve.org/CVERecord?id=CVE-2026-76474 https://www.cve.org/CVERecord?id=CVE-2026-76487 https://www.cve.org/CVERecord?id=CVE-2026-76505 https://www.cve.org/CVERecord?id=CVE-2026-76462 GARR CERT Security Alert - subscribe/unsubscribe: https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCatobjAAKCRDBnEyTZRJg QiruAKCQrObMCPgp6xD9+RWdnAqUyv4zoACcCbcey6rIOD/q2EBk498MiruWPN8= =q+uK -----END PGP SIGNATURE-----