保安警報 (A26-10-39): Cisco 產品多個漏洞

描述:

Cisco 發布了安全性更新，以應對數個 Cisco 裝置及軟件的多個漏洞。有關漏洞及攻擊向量的資料，請參閱供應商網站的相應安全公告。

受影響的系統:

• Cisco Cloud-delivered Firewall
• Cisco Cyber Vision
• Cisco Emergency Responder
• Cisco Expressway Series
• Cisco IOS XR 64-bit Software
• Cisco Meraki MX Security Appliances
• Cisco Prime Collaboration Deployment
• Cisco Secure Access
• Cisco Secure Client Secure Firewall Posture Module
• Cisco Secure Firewall Threat Defense Software
• Cisco Unified Communications Manager
• Cisco Unified Communications Manager IM and Presence Service
• Cisco Unified Communications Manager Session Management Edition
• Cisco Unity Connection
• Open Source Snort 3
• Unified Threat Defense on Cisco IOS XE Software

有關受影響產品的詳細資料，請參閱供應商網站的相應安全公告中有關 “Affected Products” 的部分。

影響:

成功利用漏洞可以導致受影響的系統發生遠端執行程式碼、服務被拒絕、權限提升、泄漏資訊、繞過保安限制或篡改，視乎攻擊者利用哪些漏洞而定。

建議:

現已有適用於受影響系統的軟件更新。受影響系統的系統管理員應遵從產品供應商的建議，立即採取行動以降低風險。有關修補程式的詳細資料，請參閱供應商網站的相應安全公告中有關 “Fixed Software” 的部分。

系統管理員應聯絡其產品支援供應商，以取得修補程式及有關支援。

進一步資訊:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr9k-tUyxcyXN
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-access-PW9e8Jt2
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-inf-disc-vvYqgSTS
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-snort3-ybgmhTQe
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-opensrc-snort3-2fXGJPfe
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-client-priv-esc-muF8eZdm
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-gre-JNpMHrTv
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-gtpcodec-dos-Rmecfepz
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-mime-vulns-bkXjcKkt
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-misc-dos-6mB22qAK
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-vba-bufdos-jAuFdvn9
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vcs-static-cred-hr7EWZ8t
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20011
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20019
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20043
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20179
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20197
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20218
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20221
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20236
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20291
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20356
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76435
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76445
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76462
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76466
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76473 (to CVE-2026-76479)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76481
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76487
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76489 (to CVE-2026-76497)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76505
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76524