Alert GCSA-26243 - Vulnerabilita' in prodotti WatchGuard

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

   alert ID: GCSA-26243
       data: 30 settembre 2026
     titolo: Vulnerabilita' in prodotti WatchGuard

******************************************************************

:: Descrizione del problema

   WatchGuard ha rilasciato nuove versioni dei suoi prodotti con le quali risolve 15 vulnerabilita',
   delle quali una di livello "critico" e 13 di livello "alto."

   Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

   WatchGuard Fireware OS Default versioni precedenti alla 2026.3.2
   WatchGuard Fireware OS Default versioni precedenti alla 2026.2.3
   WatchGuard Fireware OS Default versioni precedenti alla 12.12.3
   WatchGuard Fireware OS T15/T35 versioni precedenti alla 12.5.21


:: Impatto

   Denial of Service (DoS)
   Bypass delle funzionalita' di sicurezza (SFB)
   Esecuzione remota di codice arbitrario (RCE)
   Rivelazione di informazioni (ID)


:: Soluzioni

   Applicare gli aggiornamenti rilasciati dal produttore.

   Upgrade Fireware or WatchGuard System Manager
   https://www.watchguard.com/help/docs/help-center/en-US/content/en-US/Fireware/installation/version_upgrade_new_c.html

   Manage Firmware Versions for Devices in WatchGuard Cloud
   https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/Devices/sub_upgrade-firmware.html

   Per scaricare il software relativo al modello di Firebox
   https://software.watchguard.com/


:: Riferimenti

   WatchGuard Security Advisories
   https://psirt.watchguard.com/

   CVE ID
   https://www.cve.org/CVERecord?id=CVE-2026-86134
   https://www.cve.org/CVERecord?id=CVE-2026-86104
   https://www.cve.org/CVERecord?id=CVE-2026-18145
   https://www.cve.org/CVERecord?id=CVE-2026-13046
   https://www.cve.org/CVERecord?id=CVE-2026-86101
   https://www.cve.org/CVERecord?id=CVE-2026-86133
   https://www.cve.org/CVERecord?id=CVE-2026-13224
   https://www.cve.org/CVERecord?id=CVE-2026-86132
   https://www.cve.org/CVERecord?id=CVE-2026-86105
   https://www.cve.org/CVERecord?id=CVE-2026-90441
   https://www.cve.org/CVERecord?id=CVE-2026-86131
   https://www.cve.org/CVERecord?id=CVE-2026-86136
   https://www.cve.org/CVERecord?id=CVE-2026-81433
   https://www.cve.org/CVERecord?id=CVE-2026-86128
   https://www.cve.org/CVERecord?id=CVE-2026-18105


GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCar0JNAAKCRDBnEyTZRJg
Qin7AJ9UI0ZkD9dy8DF23nlxM12TTsLPcACfV/on6VUc9uT+6yXoMqP6XqLImhw=
=mkOJ
-----END PGP SIGNATURE-----