[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNeAkpoReuCtQUZ5XcInMW8yLFK9X3DXPVmGJjXCHyVc":3},{"article":4,"iocs":49,"watch_terms":76,"solutions":77,"lesson":175},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"9b737b8f-ab06-4e81-8883-2af95b2b5f86","Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws","cisco-watchguard-release-patches-sonicwall-won-t-fix-gms-flaws-daf3a4","Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws. The post Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws appeared first on SecurityWeek.","Cisco and WatchGuard have released patches for several vulnerabilities, including critical RCE and authentication flaws. Meanwhile, SonicWall has announced that its End-of-Life Global Management System (GMS) will not receive fixes for two critical vulnerabilities, CVE-2026-109593 and CVE-2026-109594, leaving users exposed.","Cisco and WatchGuard patch vulnerabilities; SonicWall will not fix GMS flaws.","https:\u002F\u002Fwww.securityweek.com\u002Fcisco-watchguard-release-patches-sonicwall-wont-fix-gms-flaws\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F07\u002Fsoftware-vulnerability-patch-update.jpg","2026-11-05T12:33:49+00:00","2026-11-05T13:00:18.432117+00:00",7,[17,20,22,24,27,29],{"name":18,"type":19},"Cisco","vendor",{"name":21,"type":19},"WatchGuard",{"name":23,"type":19},"SonicWall",{"name":25,"type":26},"UCS Central Software","product",{"name":28,"type":26},"AuthPoint Authentication Gateway",{"name":30,"type":26},"Global Management System (GMS)","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,44],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54,57,59,61,64,67,70,73],{"type":51,"value":52,"context":53},"cve","CVE-2026-98432","Critical severity use-after-free issue in Linux kernel networking code affecting WatchGuard products.",{"type":51,"value":55,"context":56},"CVE-2026-121639","Critical authentication issue in WatchGuard AuthPoint Authentication Gateway.",{"type":51,"value":58,"context":56},"CVE-2026-121638",{"type":51,"value":60,"context":56},"CVE-2026-121640",{"type":51,"value":62,"context":63},"CVE-2026-121637","High severity integrity validation bug in WatchGuard AuthPoint Authentication Gateway.",{"type":51,"value":65,"context":66},"CVE-2026-76506","High severity RCE\u002Finformation leak vulnerability in Cisco UCS Central Software.",{"type":51,"value":68,"context":69},"CVE-2026-111497","Exploited out-of-bounds write flaw in Google's Brotli library (Node2Shell\u002FHTTP2Shell\u002FBroccoli2Shell) affecting Cisco products.",{"type":51,"value":71,"context":72},"CVE-2026-109593","Critical severity file read bug in SonicWall Global Management System (GMS).",{"type":51,"value":74,"context":75},"CVE-2026-109594","Medium severity SQL injection in SonicWall Global Management System (GMS).",[18,23,21],{"controls":78,"vendors":165},[79,108,137],{"slug":80,"name":81,"problem":82,"products":83},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":109,"name":110,"problem":111,"products":112},"patch-management","Automated patch management","Known holes get closed in days, not months.",[113,121,129],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":48,"name":138,"problem":139,"products":140},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[141,149,157],{"vendor_slug":142,"vendor_name":143,"vendor_logo":144,"product_slug":145,"product_name":146,"url":147,"description":148},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":150,"vendor_name":151,"vendor_logo":152,"product_slug":153,"product_name":154,"url":155,"description":156},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":158,"vendor_name":159,"vendor_logo":160,"product_slug":161,"product_name":162,"url":163,"description":164},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",[166,171],{"slug":167,"name":18,"logo_path":168,"roles":169},"cisco","\u002Fvendor-logos\u002Fcisco.png",[170],"affected",{"slug":172,"name":23,"logo_path":173,"roles":174},"sonicwall","\u002Fvendor-logos\u002Fsonicwall.png",[170],{"slug":176,"title":177,"body":178,"framework_refs":179,"framework_notes":187},"eol-gms-left-unpatched-as-cisco-and-watchguard-push-critical-fixes","EoL GMS Left Unpatched as Cisco and WatchGuard Push Critical Fixes","This incident highlights the compounding risk of running End-of-Life (EoL) software in production environments: when vendors cease support, critical vulnerabilities go unaddressed, leaving organizations permanently exposed. SonicWall's decision not to patch two critical flaws in GMS underscores that EoL systems are not just outdated — they are active liabilities. Meanwhile, the Cisco and WatchGuard patches serve as a reminder that timely remediation of critical RCE and authentication vulnerabilities is essential to prevent system compromise. Organizations that delay patching or fail to plan for EoL transitions hand attackers a reliable, indefinite foothold.",[180,181,182,183,184,185,186],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIS2 Article 21(2)(b)","PCI DSS Requirement 6",{"NIS2 Article 21(2)(b)":188,"PCI DSS Requirement 6":189,"NIST SP 800-53 SI-2: Flaw Remediation":190,"OWASP A06:2021 Vulnerable and Outdated Components":191,"CIS Control 7: Continuous Vulnerability Management":192,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":193,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":194},"NIS2 mandates incident handling and vulnerability management practices, requiring operators of essential services to address known critical vulnerabilities or face regulatory consequences.","PCI DSS Requirement 6 mandates that all system components are protected from known vulnerabilities by installing applicable security patches, making continued use of unpatched EoL GMS non-compliant.","SI-2 requires organizations to identify, report, and correct information system flaws; a formal flaw remediation process would mandate migrating away from EoL GMS rather than leaving critical CVEs unaddressed.","Running EoL SonicWall GMS with known, unpatched critical CVEs is a textbook example of the risk posed by outdated components that no longer receive vendor security fixes.","Regular authenticated scanning would have surfaced the unpatched Cisco, WatchGuard, and EoL SonicWall GMS vulnerabilities, enabling prioritised remediation before attackers could exploit them.","This control requires timely identification and remediation of technical vulnerabilities, including planning for software that will no longer receive security updates from the vendor.","The unpatched authentication flaws in these products directly violate this principle; limiting access to management interfaces reduces exploitability while patches are pending."]