Alert GCSA-26298 - Vulnerabilita' in prodotti WatchGuard

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26298 data: 2 novembre 2026 titolo: Vulnerabilita' in prodotti WatchGuard ****************************************************************** :: Descrizione del problema WatchGuard ha rilasciato nuove versioni di Fireware OS, con le quali risolve 17 vulnerabilita', delle quali 7 sono di livello "critico" e 7 di livello "alto." Inoltre e' stata corretta una vulnerabilita' anche in Mobile VPN with SSL Client for Windows. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato WatchGuard Fireware OS Default versioni precedenti alla 2026.4 WatchGuard Fireware OS Default versioni precedenti alla 12.12.4 WatchGuard Fireware OS T15/T35 versioni precedenti alla 12.5.22 Mobile VPN with SSL Client for Windows versioni precedenti alla 2026.4 :: Impatto Denial of Service (DoS) Bypass delle funzionalita' di sicurezza (SFB) Esecuzione remota di codice arbitrario (RCE) Rivelazione di informazioni (ID) :: Soluzioni Applicare gli aggiornamenti rilasciati dal produttore. Upgrade Fireware or WatchGuard System Manager https://www.watchguard.com/help/docs/help-center/en-US/content/en-US/Fireware/installation/version_upgrade_new_c.html Manage Firmware Versions for Devices in WatchGuard Cloud https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/Devices/sub_upgrade-firmware.html Per scaricare il software relativo al modello di Firebox https://software.watchguard.com/ :: Riferimenti WatchGuard Security Advisories https://psirt.watchguard.com/ https://psirt.watchguard.com/CVE-2026-82332 https://psirt.watchguard.com/CVE-2026-103594 https://psirt.watchguard.com/CVE-2026-104381 https://psirt.watchguard.com/CVE-2026-93865 https://psirt.watchguard.com/CVE-2026-103593 https://psirt.watchguard.com/CVE-2026-93857 https://psirt.watchguard.com/CVE-2026-111107 https://psirt.watchguard.com/CVE-2026-93866 https://psirt.watchguard.com/CVE-2026-93864 https://psirt.watchguard.com/CVE-2026-93862 https://psirt.watchguard.com/CVE-2026-90464 https://psirt.watchguard.com/CVE-2026-112710 https://psirt.watchguard.com/CVE-2026-112709 https://psirt.watchguard.com/CVE-2026-93434 https://psirt.watchguard.com/CVE-2026-113881 https://psirt.watchguard.com/CVE-2026-90442 https://psirt.watchguard.com/CVE-2026-90465 https://psirt.watchguard.com/CVE-2026-115495 Cyber Security News https://cybersecuritynews.com/watchguard-discloses-critical-firewall-flaws/ GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCauiWqgAKCRDBnEyTZRJg QpH0AJ9IoxuIVsEbn71Ez06QKDhjOLNNEwCg1ghncJhZGvwvvx6PXp7Yjm3/po8= =V9YE -----END PGP SIGNATURE-----