Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws
Source SecurityWeek
Mentioned vulnerabilities
End of life, no fix coming : replace or isolate affected systems; no fix will be released.
Data as of 5 Nov 2026, 12:48 UTC
Rated High by Threat Radar's AI analysis
- Patch
- None coming – the product is end of life
What to do
No fix will be released: the affected product is end of life. Replace it, or isolate it from untrusted networks until you can.
AI-suggested
Cisco and WatchGuard have released official patches for their respective vulnerabilities and users should apply these updates promptly. WatchGuard notes that some affected products running vulnerable Linux kernel versions do not currently have patches available for all issues, so monitoring vendor advisories is recommended. SonicWall users of the legacy GMS platform should be aware that no patches will be provided for the identified vulnerabilities due to the product's end-of-life status; mitigating risk may require discontinuing use or isolating the affected system. Neither Cisco nor WatchGuard report active exploitation in the wild at this time.
Description
Cisco and WatchGuard have released patches addressing multiple vulnerabilities, including a high-severity remote code execution (RCE) flaw in Cisco UCS Central Software and critical authentication and integrity issues in WatchGuard products. WatchGuard also disclosed a critical use-after-free vulnerability in the Linux kernel affecting some of its products, though not exploitable via RCE in those cases. SonicWall's legacy Global Management System (GMS), which reached end-of-life in October 2025, contains two vulnerabilities—a critical unauthenticated file read and a medium-severity SQL injection—that will remain unpatched.