Alert GCSA-26313 - Vulnerabilita' in SonicWall SonicOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26313 data: 9 novembre 2026 titolo: Vulnerabilita' in SonicWall SonicOS ****************************************************************** :: Descrizione del problema SonicWall ha rilasciato versioni aggiornate del SonicWall SonicOS per risolvere 7 vulnerabilita', di cui 4 con gravita' "alta". Tra queste si evidenzia la CVE-2026-19868, presente nel servizio SonicOS SSL-VPN, per la quale sono stati osservati tentativi di sfruttamento attivo in rete. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Prodotti interessati SonicWall SonicOS Gen7, versione 7.3.3-7015 e precedenti SonicWall SonicOS Gen8, versione 8.2.2-8015 e precedenti :: Impatto Denial of Service (DoS) Bypass delle funzionalita' di sicurezza (SFB) Authentication Bypass Accesso a dati riservati (ID) :: Soluzioni SonicWall SonicOS 7.3.4-7013 e versioni successive SonicWall SonicOS 8.2.3-8015 e versioni successive :: Riferimenti SonicWall Security Advisory https://psirt.global.sonicwall.com/vuln-list https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014 Bleeping Computer https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/ The Hacker News https://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html Mitre CVE https://www.cve.org/CVERecord?id=CVE-2026-19703 https://www.cve.org/CVERecord?id=CVE-2026-77709 https://www.cve.org/CVERecord?id=CVE-2026-77708 https://www.cve.org/CVERecord?id=CVE-2026-19868 https://www.cve.org/CVERecord?id=CVE-2026-82308 https://www.cve.org/CVERecord?id=CVE-2026-107155 https://www.cve.org/CVERecord?id=CVE-2026-107154 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCavGgtgAKCRDBnEyTZRJg QsfZAKCopYZS22HbuxrYboygVwlqqW3DsgCgqM5elRZRbtnRmdmmcSKCW79pbms= =zuk2 -----END PGP SIGNATURE-----