Nga-30 Inyoni 2026, nga-4 ntsambama ngesikhatsi saseRiyadh, i-Cisco ishicilele secwayiso sekuvikeleka nge-CVE-2026-76504 ku-Cisco Catalyst SD-WAN Manager, luhlelo tinkampani letinemagatja lamanyenti letilusebentisako kugijimisa lonkhe luchungechunge lwemagatja ato kusuka esikrinini sinye. Linani lebucayi li-9.8 kuma-10, kusebentisa lembobo akudzingi i-akhawunti noma liphasiwedi, i-Cisco itsi yeva ngekusetjentiswa kwayo ngesikhatsi saNyoni, futsi akukho ndlela yesikhashana yekuyibalekela. Ngalo lelo langa, Siphatsimandla Savelonkhe Sekuvikeleka Kwe-inthanethi saseSaudi Arabia (NCA) sikhiphe secwayiso 2026-7889 lesisezingeni Lelibucayi kakhulu, sicela tinhlangano kutsi tibukisise lesecwayiso futsi tifake lokuvuselelwa.

Umbuto lomkhulu akusiwo welubuchwepheshe: ngubani lotawuvala imbobo?

Emaviki lamabili langendlulile sabhala nge-mbobo leyasetjentiswa kulelinye litfuluzi le-Cisco, leliphatsa kutibonakalisa nekungena, futsi lapho sachaza tisekelo tekuphatsa timbobo tekuvikeleka. Kulesikhatsi umbuto lobaluleke kakhulu akusiwo welubuchwepheshe. Kungenteka kutsi awulugijimisi nhlobo luchungechunge lwemagatja akho: inkampani yetekuchumana noma inkampani ye-IT ingalugijimisa egameni lakho ngaphansi kwesivumelwano semsebenti lophatsiwe. Nangabe kunjalo, ngubani lotawuvuselela luhlelo lamuhla ebusuku, ngubani lotawuhlola kutsi kukhona lowangena yini ngaphambi kwekuvuselela, futsi sivumelwano sakho sitsini nangabe kute kwaloku lokwenteka?

Loko i-Cisco lekushicilele ngempela

Letindzaba tisanemahora lambalwa, ngako-ke letinchubo tivela ngco esecwayisweni se-Cisco nasesecwayisweni se-NCA, hhayi etindzabeni temaphephandzaba:

  • Umkhicito: Cisco Catalyst SD-WAN Manager, lebeyatiwa ngekutsi yi-vManage. Lesecwayiso sitsi itsintseka noma ngabe ihlelwe njani.
  • Imbangela: kuphatsa kabi ikhodi ye-URI eticelweni te-HTTP kuvumela sicelo lesentiwe ngebuciko kutsi sedlule umtsetfo wekucinisekisa lohloselwe kuvikela indzawo letsite ye-API, ngako-ke lohlaselako ufinyelela ku-API ngemalungelo emsebentisi admin.
  • Lokudzingekako kucala: kute. Lohlaselako lokude, longakacinisekiswa, kanye nelinani lesisekelo le-CVSS le-9.8.
  • Simo: isetjentiswa nyalo ngulabahlasela. I-Cisco PSIRT itsi yeva ngekusetjentiswa kwayo ngaNyoni 2026, nekutsi lembobo itfolakale ngesikhatsi kuxazululwa licala lekusekelwa le-Cisco Technical Assistance Center.
  • Indlela yesikhashana: kute. Lilungiso kuvuselela uye ekukhishweni lokulungisiwe.
  • Secwayiso sasekhaya: secwayiso se-NCA 2026-7889, sangamhla ka-30 Inyoni 2026. Sibala imikhakha lehlosiwe le-14, empeleni yonkhe, kusuka kutekuhweba netekutfutfukisa timali, timali netemnotfo netemphilo kuya kutemfundvo, tekutfutsa nekukhicita.

Kukhishwa lokulungisiwe, ngekusho kwalesecwayiso:

Luhlobo lwekukhishwa lwanyaloKukhishwa kwekucala lokulungisiwe
Ludzala kune-20.9Dlulela ekukhishweni lokulungisiwe
20.920.9.10.1
20.1220.12.8.2
20.1520.15.6.1
20.1820.18.4.1
26.126.1.2.1
26.226.2.1

Naka lulayini lwekucala. Nobe ngubani losebentisa kukhishwa lokudzala kune-20.9 akabhekene nekuvuselela lokuncane, kodvwa ubhekene nekudlulela kulolunye luhlobo lwekukhishwa. Loko kudzinga kuhlela, futsi akukhoni kulinda.

Kungani lolu luhlelo ngalokucondzile

Luchungechunge lwe-SD-WAN luhlanganisa emagatja, ematfuluzi ekugcina timphahla nelihhovisi lelikhulu ngato tonkhe tindlela tekuchumana letikhona, futsi konkhe kuphatswa kusuka eluhlelweni lunye lolusemkhatsini. Lapho kulapho kubhalwa khona tinchubomgomo: nguyiphi imininingwane lehamba ngaluphi luchumano, nguliphi ligatja lelingafinyelela kuluphi luhlelo, kanye nguyiphi imihlelo letfunyelwa ku-router endzaweni ngayinye. Lushintjo lunye emkhatsini lufinyelela kuwo onkhe emagatja. Leyo yinjongo yako konkhe.

Lesici lesifanako siyingoti. Nobe ngubani lofinyelela ku-API yalolu luhlelo ngemalungelo e-admin akabhekani nelitfuluzi linye, kodvwa ubhekene nelikhonsoli leliphatsa luhlelo lwaluchungechunge lonkhe. Indzawo yekutsengisa eligatjeni, luchumano lolubheke endzaweni yekugcina timphahla, kanye nekungena eluhlelweni lwetimali kusuka ngaphandle kwelihhovisi lelikhulu kungenteka kutsi konkhe kuhamba eluchungechungeni lolulawulwa ngulolu luhlelo. Lufanele kuba ngetulu luhlu lwetimphahla letibalulekile, noma ngabe lubonakala lukhashane kangakanani ekuphatseni kwemalanga onkhe.

Lifu le-Cisco noma sikhungo sakho sedatha? Loko kunquma kutsi ngubani lotawusukuma

Lesecwayiso sehlukanisa tindlela letimbili tekugijimisa lolu luhlelo, futsi umehluko uyasebenta kakhulu:

  • Kulifu le-Cisco: lesecwayiso sitsi lembobo itsintsa i-SD-WAN Manager noma ngabe ihlelwe njani, futsi sichaza timo letimbili telifu. Etindzaweni te-Cisco Catalyst SD-WAN Cloud Hosted, i-Cisco seyivele isebentise linyatselo lekunciphisa ingoti ngekuvimba kungena, kodvwa kunciphisa ingoti akusilo lilungiso, ngako-ke kuvuselela kuya ekukhishweni lokulungisiwe kulelithebula lelingenhla kusadzingeka, futsi kufanele ubute kutsi ngubani lotakwenta. Ku-Cisco SD-WAN Cloud (Cisco Managed), kukhishwa kwe-20.15.605 kulungisa lembobo, i-Cisco itsi akudzingeki kutsi umsebentisi enteni, futsi luhlobo lungahlolwa ngelikhono le-Help esikrinini salomsebenti. Kuphela kulesimo sekugcina lapho kuvuselela kungumsebenti wemkhicitayo. Umsebenti wakho usewukutfola kucinisekiswa lokubhaliwe nekucela kutsi emalogu ahlolwe esikhatsini lesendvulela loko.
  • Endzaweni yakho, esizeni sakho noma esikhungweni sedatha somhlinzeki wakho: lapha kute lotakuvuselela luhlelo egameni lakho ngaphandle uma sivumelwano sisho njalo. Kuze kube kuvuselelwa, linyatselo i-Cisco lelichazako kuvimba kungena eluhlelweni kusuka kuletinchungechunge letingaphephile njenge-inthanethi, nekuvikela tingcenye tekulawula te-SD-WAN ngemuva kwelitfuluzi lekuhlunga njenge-firewall.

Ngako-ke umbuto wekucala akusiwo kutsi uyayisebentisa yini i-Cisco. Ngulokutsi luhlelo lwakho lwekuphatsa luchungechunge lusebenta kuphi futsi ngubani lonesibopho sekuluvuselela. Nangabe ngumhlinzeki kuphela lowati imphendvulo, leso sikhala sekucala lokufanele sivalwe, futsi akusiso sikhala selubuchwepheshe.

Kuvuselela akukutjeli kutsi kukhona yini lowangena kucala

I-Cisco yeva ngekusetjentiswa kwalembobo ngaNyoni futsi yashicilela lilungiso ngelilanga lekugcina lenyanga. Ngamanye emagama, lembobo beyisetjentiswa ngaphambi kwekutsi kube khona nobe ngukuphi kuvuselela lokungafakwa. Kuvuselela lamuhla ebusuku kuvala umnyango. Akukutjeli kutsi kukhona yini losavele wangena ngawo washiya ngemuva i-akhawunti noma lushintjo lwemihlelo.

Kungako i-Cisco ishicilele timphawu letsimba lakho le-IT noma umhlinzeki wakho lokufanele batifune kumalogu lamabili lacondzile eluhlelweni, serviceproxy-access.log ne-vmanage-server.log:

  • Ticelo leti-j_security_check letivela emakhelini e-IP langatiwa noma langakavunyelwa.
  • Nobe nguluphi luhlamvu lolufakwe ikhodi ye-URI endleleni yesicelo, njenge-%6a_security_check, lapho i-%6a iluhlamvu j lolufakwe ikhodi. Ngulena indlela lokuhlasela kwedlula ngayo umtsetfo wekucinisekisa. I-Cisco igcizelela kutsi i-%6a sibonelo nje: kufaka ikhodi kunobe nguluphi luhlamvu lunye esicelweni kungasetjentiswa, ngako-ke litsimba kufanele lifune tonkhe tinhlobo leti-j_security_check letifakwe ikhodi, hhayi i-%6a kuphela.
  • Ku-vmanage-server.log ngalokucondzile: ticelo leti-j_security_check letivela emakhelini langatiwa letentelwe emagama ebasebentisi lacala nga-viptela-reserved-. Lawa ma-akhawunti emsebenti lakhelwe ngekhatsi eluhlelweni, ngako-ke kuvela kwalelibito kulogu akusiso sibonakaliso sekungenwa ngekwako. Lokubalulekile ngumtfombo longatiwa.

I-Cisco iphindze icwayise kutsi letimphawu ngalesinye sikhatsi tingavela ngesikhatsi semsebenti lojwayelekile, ngako-ke kufanele ticatsaniswe nemisebenti lejwayelekile yaluchungechunge ngaphambi kwekufinyelela esiphetfweni.

Lifundvo lelifanako livele kulelivekhi ngetimbobo letimbili letibucayi te-Citrix NetScaler, Lihhovisi Lekuvikeleka Kwe-inthanethi Nekuvikeleka Kwengcalasizinda laseMelika (CISA) lelatifaka kuluhlu lwalo lwe-Known Exploited Vulnerabilities nga-27 Inyoni. I-CISA itsite labasongela basebentisa letimbobo emhlabeni wonkhe, yakhutsata tinhlangano kutsi tihlole timphawu tekungenwa ngaphambi kwekuvala timbobo lapho kungenteka khona, futsi yatsi nobe nguyiphi inhlangano lesola kungenwa kufanele igcine bufakazi be-forensic ngaphambi kwekufaka kuvuselela, ngobe kuvuselela kungasula imikhondvo yaloko lokwenteka. Lomtsetfo uyasebenta nalapha: hlola, gcina ikhophi yemalogu, bese uyavuselela, ngaphandle kwekuvumela kuhlola kutsi kube sizatfu sekulibalisa kuvuselela emalanga lamanyenti.

Nangabe luchungechunge lwakho lungumsebenti lophatsiwe: sivumelwano sakho sitsini?

Ema-Essential Cybersecurity Controls e-NCA, lishicilelo la-2024, ayabopha etinhlanganweni tahulumende nakuletinkampani letihlobene nato, nakuletinhlangano temkhakha lotimele letinikati, letisebentisa noma letigcina Ingcalasizinda Yavelonkhe Lebalulekile. I-NCA ikhutsata kakhulu tonkhe letinye tinhlangano eMbusweni kutsi tiwasebentise. Noma inkampani yakho ingabopheki ngawo, ayindlela yasekhaya lecace kakhulu yekwati kutsi yini lokufanele ibe sesivumelwaneni sanobe ngumuphi umhlinzeki logijimisa incenye yelubuchwepheshe bakho:

  • Etivumelwaneni nalabasesitsatfu, labatsi nabangaphatamiseka, bangatsintsa idatha yakho noma imisebenti yakho, kufaka ekhatsi tivumelwano tetinga temsebenti: kugcina imfihlo nekususwa ngekuphepha kwedatha yakho ekupheleni kwemsebenti, tinchubo tekuchumana uma kwenteka sehlakalo sekuvikeleka kwe-inthanethi, kanye nesibopho salowesitsatfu sekusebentisa tidzingo netinchubomgomo takho tekuvikeleka kwe-inthanethi (kulawula 4-1-2).
  • Etivumelwaneni nalabahlinzeka nge-IT yangaphandle nangemisebenti lephatsiwe ngalokucondzile: kuhlolwa kwengoti yekuvikeleka kwe-inthanethi, netindlela tekunciphisa ingoti leticinisekisiwe, ngaphambi kwekusayina, futsi tikhungo temisebenti lephatsiwe yekuvikeleka kwe-inthanethi tekubuka nekusebenta letisebentisa kungena kusuka khashane kufanele tibe ngekhatsi eMbusweni ngalokuphelele (kulawula 4-1-3).
  • Ekuphatseni timbobo tekuvikeleka: kuhlela timbobo ngekwebucayi bato nekutilungisa ngekuya ngaloku kuhlela, kubhalisela imitfombo yetsembekile yetindzaba ngetimbobo letinsha, nekuhlola kuvuselela endzaweni lengasiyo yemsebenti wangempela ngaphambi kwekukufaka (kulawula 2-10-3).

Naka loko kulawula kwekuphatsa timbobo lokungakusho: akubeki sikhatsi sekugcina sekufaka kuvuselela lokubucayi. Leyo nombolo kufanele ibhalwe esivumelwaneni sakho. Ngaphandle kwaloko, umhlinzeki uvala imbobo ngesikhatsi akhona ngaso, hhayi ngesikhatsi wena lokudzinga ngaso.

Umlayeto lokufanele uwutfumele kumhlinzeki wakho lamuhla

Awudzingi kuba ngulowatiko lubuchwepheshe kute ubute lemibuto, futsi awudzingi kulinda umhlangano. Cela timphendvulo letibhaliwe:

  • Luchungechunge lwetfu lusebenta nge-Cisco Catalyst SD-WAN Manager yini? Futsi isebenta kuphi: kulifu le-Cisco, esizeni setfu, noma esikhungweni senu sedatha?
  • Ikukuphi kukhishwa, futsi itawuvuselelwa nini iye ekukhishweni lokulungisiwe, ngelilanga nelihora?
  • Sikrini sekuphatsa siyafinyeleleka yini ku-inthanethi nyalo? Nangabe kunjalo, nikuvimbele yini kungena kuze kube kuvuselelwa?
  • Niwahlolile yini emalogu lamabili i-Cisco lewabalile kutsi akhona yini timphawu letishicilelwe, futsi nagcina yini ikhophi ngaphambi kwekuvuselela? Nitfoleni?
  • Ngubani lowasitjela kucala ngalesecwayiso: nine, noma indzaba lesayifundza? Futsi yini inchubo lesivumelene ngayo yekusatisa ngalokulandzelako?

Umbuto wekugcina ngiwo lobaluleke kakhulu. Nangabe weva ngalesecwayiso esihlokweni hhayi kumhlinzeki wakho, inkinga inkhulu kunalembobo yinye.

Umbono we-Origami

Sakha tinhlelo temabhizinisi. Asitsengisi futsi asigijimisi tisetjentiswa taluchungechunge. Kodvwa nobe nguluphi luhlelo lesilakhela likhasimende lelinemagatja lamanyenti lusebenta etulu kwaluchungechunge lesingazange siluklame: indzawo yekutsengisa yeligatja itfumela kuseva, indzawo yekugcina timphahla ivuselela situko, i-invoyisi ye-elekthroniki iya kuplatifomu. Futsi imphendvulo lejwayelekile embuzweni wekutsi ngubani lovala timbobo taluchungechunge itsi: umhlinzeki unakekela konkhe. Yimphendvulo leduduzako, futsi akusiyo imphendvulo.

Kumnikati webhizinisi waseSaudi, sifundza lembobo njengesikhumbuto sekutsi kunika labangaphandle umsebenti kudlulisa umsebenti kodvwa hhayi sibopho. Umsebenti lophatsiwe likhetfo lelifanele etinkampanini letinyenti, uma nje sivumelwano sinetintfo letintsatfu letingalinganiswa: sikhatsi lesishiwo sekufaka kuvuselela lokubucayi, sitiso lesibhaliwe sanobe ngusiphi secwayiso lesitsintsa tinhlelo takho, kanye nembiko emva kwanobe ngusiphi sehlakalo lesitsi yini lokuhloliwe nekutsi kutfolakaleni. Leyimigomo ayimbiteli lutfo umhlinzeki lomuhle, futsi iveta umhlinzeki lobutsakatsaka ngaphambi kwekutsi imbobo yekuvikeleka yente njalo.

Sifinyeto

  • Nangabe ugijimisa i-Cisco Catalyst SD-WAN Manager esizeni sakho noma kumhlinzeki wakho, kuvuselela kuya ekukhishweni lokulungisiwe kungumsebenti lophutfumako, hhayi lohleliwe, futsi kukhishwa lokudzala kune-20.9 kudzinga kudlulela eluhlotjeni lolulungisiwe.
  • Kuze kube kuvuselelwa: vimba kungena eluhlelweni kusuka ku-inthanethi futsi ubeke tingcenye tekulawula ngemuva kwe-firewall, njengobe lesecwayiso sichaza.
  • Hlola womabili emalogu futsi ugcine ikhophi ngaphambi kwekuvuselela, ngobe kusetjentiswa kwalembobo kucale ngaphambi kwekutsi lilungiso likhishwe.
  • Nangabe luchungechunge lungumsebenti lophatsiwe, tfumela lemibuto lengenhla lamuhla, bese ufaka sikhatsi sekugcina sekuvuselela lokubucayi nenchubo yekwatisa esivumelwaneni ekuvuseleleni kwaso lokulandzelako.

Imitfombo