SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform

SonicWall disclosed eight vulnerabilities in its Global Management System (GMS) and Email Security products, including two critical unauthenticated remote code execution (RCE) flaws that expose organizations to full system compromise without any credentials required. The risk is compounded by the fact that GMS is a discontinued platform, meaning organizations running legacy or end-of-life software face an elevated threat surface with limited vendor support going forward. Unauthenticated RCE vulnerabilities are among the most severe possible findings, as attackers can exploit them at scale with no prior foothold. This incident underscores the danger of retaining end-of-life network management infrastructure in production environments, where timely patching may not always be feasible or guaranteed.