Alert GCSA-26202 - Vulnerabilita' critiche in prodotti Cisco

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

   alert ID: GCSA-26202
       data: 3 settembre 2026
     titolo: Vulnerabilita' critiche in prodotti Cisco

******************************************************************

:: Descrizione del problema

   Il team Cisco PSIRT ha pubblicato vari aggiornamenti di sicurezza,
   che risolvono 11 vulnerabilita', 8 delle quali hanno gravita' "critica".

   Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Apparati e software interessati

   Cisco IOS XR Software
   Cisco Nexus 9000 Series Switches Silicon One
   Cisco Desk Phone 9800, 7800 and 8800, and 8875 Series Software
   Cisco Secure Email (Cisco AsyncOS Software)

   Per una descrizione completa dei dispositivi interessati,
   si prega di far riferimento ai Security Advisories ufficiali.


:: Impatto

   Denial of Service (DoS)
   Esecuzione remota di codice arbitrario (RCE)
   Bypass delle funzionalita' di sicurezza (SFB)
   Accesso a dati riservati (ID)
   Attacco all'integrita' dei dati (Data Manipulation)


:: Soluzioni

   Aggiornare i prodotti alla versioni piu' recenti.

   https://www.cisco.com/c/en/us/support/index.html

   Si consiglia di valutare l'impatto delle vulnerabilita' sui dispositivi in uso,
   e di aggiornare il prima possibile.

   E' possibile utilizzare Cisco Software Checker
   https://sec.cloudapps.cisco.com/security/center/softwarechecker.x
   per determinare il patching appropriato.

   Prima dell'installazione del software consultare il sito del fornitore per maggiori dettagli.


:: Riferimenti

   Cisco Security Advisories
   https://sec.cloudapps.cisco.com/security/center/publicationListing.x

   Cisco Advance Notification for Publication of September 2, 2026, Security Advisories
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-f2SiMFxl

   Cisco IOS XR Software Security Hardening Release: September 2026
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM

   Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9k-s1-rce-EH8dEtr

   Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-txMYNRzv

   Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities
   https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-smime-disc-dzw4rEdY


   CVE List
   https://www.cve.org/CVERecord?id=CVE-2026-20277
   https://www.cve.org/CVERecord?id=CVE-2026-20278
   https://www.cve.org/CVERecord?id=CVE-2026-20280
   https://www.cve.org/CVERecord?id=CVE-2026-20279
   https://www.cve.org/CVERecord?id=CVE-2026-20276
   https://www.cve.org/CVERecord?id=CVE-2026-20275
   https://www.cve.org/CVERecord?id=CVE-2026-20274
   https://www.cve.org/CVERecord?id=CVE-2026-20212
   https://www.cve.org/CVERecord?id=CVE-2026-20281
   https://www.cve.org/CVERecord?id=CVE-2026-20355
   https://www.cve.org/CVERecord?id=CVE-2026-20354


GARR CERT Security Alert - subscribe/unsubscribe:
https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert

-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaplPEgAKCRDBnEyTZRJg
Qr8bAKDgi5HftF/PHyzP9NTunvSsEem1owCfZePcKLpDHz1lZwdebqzmstKX6xQ=
=32pO
-----END PGP SIGNATURE-----