Alert GCSA-26159 - Vulnerabilita' critiche in prodotti Cisco

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

   alert ID: GCSA-26159
       data: 5 agosto 2026
     titolo: Vulnerabilita' critiche in prodotti Cisco

******************************************************************

:: Descrizione del problema

   Cisco ha pubblicato 14 avvisi di sicurezza, con i quali vengono risolte 23 vulnerabilita',
   delle quali 4 di livello "Critico" e 12 di limello "Alto".

   Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Apparati e software interessati

   Cisco Catalyst SD-WAN
   Cisco Integrated Management Controller (IMC)
   Cisco Secure Firewall Management Center Software
   Cisco IOS e IOS XE Software
   Cisco RoomOS
   Cisco Terminal Services Agent

   Per una descrizione completa dei dispositivi interessati,
   si prega di far riferimento ai Security Advisories ufficiali.


:: Impatto

   Denial of Service (DoS)
   Bypass delle funzionalita' di sicurezza (SFB)
   Accesso a dati riservati (ID)
   Cross-site Scripting (XSS)


:: Soluzioni

   Si consiglia di valutare l'impatto delle vulnerabilita' sui dispositivi in uso,
   e di aggiornare il prima possibile.

   E' possibile utilizzare Cisco Software Checker
   https://sec.cloudapps.cisco.com/security/center/softwarechecker.x
   per determinare il patching appropriato.

   Prima dell'installazione del software consultare il sito del fornitore per maggiori dettagli.


:: Riferimenti

   Cisco Security Advisories
   https://sec.cloudapps.cisco.com/security/center/publicationListing.x

   Cisco Advance Notification for Publication of August 5, 2026, Security Advisories
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-L4XfJg8S

   Cisco Catalyst SD-WAN
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-infodis-SPuJBDCe
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K

   Cisco Integrated Management Controller (IMC)
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-arg-inject-upSHdMfU
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-7EhBFxBp

   Cisco Secure Firewall Management Center Software
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh

   Cisco IOS e IOS XE
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-bing-MGHrFAkd
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-snmp-dos-ZAqNm4MD
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-PtAODAWW
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-dos-qdc7qx3
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xmcp-thbAr34t

   Cisco RoomOS
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-qBXjfmWm

   Cisco Terminal Services Agent
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ts-agent-fw-bypass-MYBTMrev

   CVE List
   I riferimenti CVE sono disponibili nell'advisory originale.


GARR CERT Security Alert - subscribe/unsubscribe:
https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert


-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCanOugQAKCRDBnEyTZRJg
QvqzAKDLWCIJ7CkFdTx7is4j1caivBvSOACgrw4CY32U5ioPR4Otu+GFPxiBBQg=
=hGuI
-----END PGP SIGNATURE-----