Alert GCSA-26306 - Vulnerabilita' in prodotti Cisco

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26306 data: 5 novembre 2026 titolo: Vulnerabilita' in prodotti Cisco ****************************************************************** :: Descrizione del problema Cisco ha rilasciato aggiornamenti di sicurezza per risolvere alcune vulnerabilita' nei propri prodotti. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Apparati e software interessati Cisco Unified Computing System (USC) Central Software Cisco ISE e Cisco ISE-PIC Cisco Unified Communications Manager (Unified CM) Cisco Unified Communications Manager Session Management Edition (Unified CM SME) Cisco AsyncOS Software for Cisco Secure Email Gateway Per una descrizione completa dei dispositivi interessati, si prega di far riferimento ai Security Advisories ufficiali. :: Impatto Esecuzione remota di codice arbitrario (RCE) Bypass delle funzionalita' di sicurezza (SFB) Cross Site Scripting (XSS) SQL Injection (SQLi) Rivelazione di informazioni (ID) Arbitrary File Write :: Soluzioni Aggiornare i prodotti alla versioni piu' recenti. https://www.cisco.com/c/en/us/support/index.html Si consiglia di valutare l'impatto delle vulnerabilita' sui dispositivi in uso, e di aggiornare il prima possibile. E' possibile utilizzare Cisco Software Checker https://sec.cloudapps.cisco.com/security/center/softwarechecker.x per determinare il patching appropriato. Prima dell'installazione del software consultare il sito del fornitore per maggiori dettagli. :: Riferimenti Cisco Security Advisories https://sec.cloudapps.cisco.com/security/center/publicationListing.x Cisco Advance Notification for Publication of November 4, 2026, Security Advisories https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-I8z3n6lK Cisco UCS Central Software Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucs-rce-LzHSFRDQ Cisco Identity Services Engine Authorization Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cert-mE9BD5GO Cisco Unified Communications Manager Cross-Site Scripting Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-5mQn2U5z Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX CVE List https://www.cve.org/CVERecord?id=CVE-2026-76506 https://www.cve.org/CVERecord?id=CVE-2026-20241 https://www.cve.org/CVERecord?id=CVE-2026-76419 https://www.cve.org/CVERecord?id=CVE-2026-76461 GARR CERT Security Alert - subscribe/unsubscribe: https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaux4DwAKCRDBnEyTZRJg QrnnAKDeXv2aPZAoSqr+cpeAfCMO5qirpQCffLi6YS10J8V+5Du7/R3S/OOX5a0= =u2fP -----END PGP SIGNATURE-----