Alert GCSA-26197 - Vulnerabilita' in prodotti WatchGuard

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

   alert ID: GCSA-26197
       data: 29 agosto 2026
     titolo: Vulnerabilita' in prodotti WatchGuard

******************************************************************

:: Descrizione del problema

   WatchGuard ha rilasciato nuove versioni dei suoi prodotti con le quali risolve 30 vulnerabilita',
   7 delle quali di livello "critico" e 12 di livello "alto."

   Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

   WatchGuard Fireware OS Default tutte le versioni 2025.x
   WatchGuard Fireware OS Default versioni precedenti alla 2026.2.2
   WatchGuard Fireware OS Default versioni precedenti alla 12.12.2
   WatchGuard Fireware OS T15/T35 versioni precedenti alla 12.5.20

   WatchGuard Dimension versioni precedenti alla 2.3.1

   WatchGuard Agent versioni precedenti alla 1.25.13.0000


:: Impatto

   Denial of Service (DoS)
   Bypass delle funzionalita' di sicurezza (SFB)
   Esecuzione remota di codice arbitrario (RCE)
   Server-side request forgery (SSRF)
   Cross-site Scripting (XSS)
   SQL Injection (SQLi)


:: Soluzioni

   Applicare gli aggiornamenti rilasciati dal produttore.

   Upgrade Fireware or WatchGuard System Manager
   https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/installation/version_upgrade_new_c.html

   Manage Firmware Versions for Devices in WatchGuard Cloud
   https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/Devices/sub_upgrade-firmware.html

   Per scaricare il software relativo al modello di Firebox
   https://software.watchguard.com/


:: Riferimenti

   WatchGuard Security Advisories
   https://psirt.watchguard.com/

   CVE ID

   Severity Critical
   https://www.cve.org/CVERecord?id=CVE-2026-19315
   https://www.cve.org/CVERecord?id=CVE-2026-13086
   https://www.cve.org/CVERecord?id=CVE-2026-19318
   https://www.cve.org/CVERecord?id=CVE-2026-19313
   https://www.cve.org/CVERecord?id=CVE-2026-78174
   https://www.cve.org/CVERecord?id=CVE-2026-57910
   https://www.cve.org/CVERecord?id=CVE-2026-57909

   Severity High
   https://www.cve.org/CVERecord?id=CVE-2026-78011
   https://www.cve.org/CVERecord?id=CVE-2026-19314
   https://www.cve.org/CVERecord?id=CVE-2026-19317
   https://www.cve.org/CVERecord?id=CVE-2026-78010
   https://www.cve.org/CVERecord?id=CVE-2026-78009
   https://www.cve.org/CVERecord?id=CVE-2026-19316
   https://www.cve.org/CVERecord?id=CVE-2026-78008
   https://www.cve.org/CVERecord?id=CVE-2026-78612
   https://www.cve.org/CVERecord?id=CVE-2026-78613
   https://www.cve.org/CVERecord?id=CVE-2026-78610
   https://www.cve.org/CVERecord?id=CVE-2026-13108
   https://www.cve.org/CVERecord?id=CVE-2026-78614

   Severity Medium
   https://www.cve.org/CVERecord?id=CVE-2026-81851
   https://www.cve.org/CVERecord?id=CVE-2026-78616
   https://www.cve.org/CVERecord?id=CVE-2026-78498
   https://www.cve.org/CVERecord?id=CVE-2026-78615
   https://www.cve.org/CVERecord?id=CVE-2026-78103
   https://www.cve.org/CVERecord?id=CVE-2026-78495
   https://www.cve.org/CVERecord?id=CVE-2026-78617
   https://www.cve.org/CVERecord?id=CVE-2026-78047
   https://www.cve.org/CVERecord?id=CVE-2026-78499
   https://www.cve.org/CVERecord?id=CVE-2026-78618
   https://www.cve.org/CVERecord?id=CVE-2026-78500


GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCapMtNgAKCRDBnEyTZRJg
Qk2fAKCTkKtSwu2u0Esy3bPaDMeU4Rsa7QCfReyHKO6PJf/I4AUwcSt5zo9Id68=
=PbIM
-----END PGP SIGNATURE-----