Alert GCSA-26187 - Vulnerabilita' in prodotti Cisco
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-26187 Data: 20 Agosto 2026 Titolo: Vulnerabilita' in prodotti Cisco ****************************************************************** :: Descrizione del problema Cisco ha pubblicato 8 avvisi di sicurezza, con i quali vengono risolte 15 vulnerabilita' in vari prodotti, delle quali 9 di livello "Critico" e 1 di livello "Alto". Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Apparati e software interessati Cisco BroadWorks Cisco Crosswork Cisco Industrial Ethernet 1000 Series Switches Cisco Packaged Contact Center Enterprise Cisco RoomOS Cisco Secure Workload Software Cisco Unified Contact Center Enterprise Cisco Unified Intelligence Center Per una descrizione completa dei dispositivi interessati, si prega di far riferimento ai Security Advisories ufficiali. :: Impatto Authentication Bypass Information Disclosure Remote Code Execution Data Manipulation Security Restrictions Bypass :: Soluzioni Si consiglia di valutare l'impatto delle vulnerabilita' sui dispositivi in uso, e di aggiornare il prima possibile. E' possibile utilizzare Cisco Software Checker https://sec.cloudapps.cisco.com/security/center/softwarechecker.x per determinare il patching appropriato. Prima dell'installazione del software consultare il sito del fornitore per maggiori dettagli. :: Riferimenti Cisco Security Advisories https://sec.cloudapps.cisco.com/security/center/publicationListing.x Cisco Advance Notification for Publication of August 19, 2026, Security Advisories https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-LDquvx5d Cisco Crosswork Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP Cisco Secure Workload Software Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-crosswork-UzDTU9Vh Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bworks-xxe-uwUd7CEt Cisco Unified Intelligence Center SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-ssrf-TghHxD Cisco RoomOS Stack Overflow Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-bof-vTMANZgu Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ie1k-uxq86Lnx Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ie1k-NgXUFF52 Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-sql-inject-2qbfWSm5 Mitre CVE I riferimenti CVE sono disponibili nell'advisory originale. GARR CERT Security Alert - subscribe/unsubscribe: https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaobU6gAKCRDBnEyTZRJg Qn3OAJ9tu+azbZ8eyiObXssVFdJV5fZ4zwCgwWiJGgNrN2emx/rtDTKn2oDLobo= =ufWv -----END PGP SIGNATURE-----