保安警报 (A26-10-39): Cisco 产品多个漏洞

描述:

Cisco 发布了安全性更新，以应对数个 Cisco 装置及软件的多个漏洞。有关漏洞及攻击向量的资料，请参阅供应商网站的相应安全公告。

受影响的系统:

• Cisco Cloud-delivered Firewall
• Cisco Cyber Vision
• Cisco Emergency Responder
• Cisco Expressway Series
• Cisco IOS XR 64-bit Software
• Cisco Meraki MX Security Appliances
• Cisco Prime Collaboration Deployment
• Cisco Secure Access
• Cisco Secure Client Secure Firewall Posture Module
• Cisco Secure Firewall Threat Defense Software
• Cisco Unified Communications Manager
• Cisco Unified Communications Manager IM and Presence Service
• Cisco Unified Communications Manager Session Management Edition
• Cisco Unity Connection
• Open Source Snort 3
• Unified Threat Defense on Cisco IOS XE Software

有关受影响产品的详细资料，请参阅供应商网站的相应安全公告中有关 “Affected Products” 的部分。

影响:

成功利用漏洞可以导致受影响的系统发生远端执行程式码、服务被拒绝、权限提升、泄漏资讯、绕过保安限制或篡改，视乎攻击者利用哪些漏洞而定。

建议:

现已有适用于受影响系统的软件更新。受影响系统的系统管理员应遵从产品供应商的建议，立即採取行动以降低风险。有关修补程式的详细资料，请参阅供应商网站的相应安全公告中有关 “Fixed Software” 的部分。

系统管理员应联络其产品支援供应商，以取得修补程式及有关支援。

进一步资讯:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr9k-tUyxcyXN
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-access-PW9e8Jt2
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-inf-disc-vvYqgSTS
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-snort3-ybgmhTQe
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-opensrc-snort3-2fXGJPfe
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-client-priv-esc-muF8eZdm
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-gre-JNpMHrTv
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-gtpcodec-dos-Rmecfepz
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-mime-vulns-bkXjcKkt
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-misc-dos-6mB22qAK
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-vba-bufdos-jAuFdvn9
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vcs-static-cred-hr7EWZ8t
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20011
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20019
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20043
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20179
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20197
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20218
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20221
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20236
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20291
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20356
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76435
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76445
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76462
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76466
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76473 (to CVE-2026-76479)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76481
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76487
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76489 (to CVE-2026-76497)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76505
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76524