Cisco and WatchGuard release patches; SonicWall leaves GMS unpatched
Original title: Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws
SonicWall will not patch two critical flaws in its end-of-life Global Management System.
Cisco issued fixes for a high-severity RCE vulnerability in UCS Central. WatchGuard released patches for critical authentication and integrity issues in AuthPoint and Fireware OS. SonicWall confirmed its legacy GMS platform has unpatched critical file read and medium SQL injection vulnerabilities.
- CVE-2026-76506 in Cisco UCS Central allows authenticated RCE
- WatchGuard critical authentication flaws in AuthPoint
- SonicWall GMS: CVE-2026-109593 critical unauth file read
- CVE-2026-109594 medium SQL injection
- No known exploitation in the wild
- CVEs
- CVE-2026-76506CVE-2026-98432CVE-2026-121639CVE-2026-121638CVE-2026-121640CVE-2026-121637CVE-2026-109593CVE-2026-109594CVE-2026-111497
- Vendors
- CiscoWatchGuardSonicWall
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-109593+1 related CVE | Unauthenticated file read in SonicWall GMS 9.5.2 and earlier | 9.1 group max | — | ||
| CVE-2026-111497 | Buffer overflow in Google Brotli decoder 1.0.3–1.2.0 | 9.2 | 83% | KEVPoC ×25 | KEV |
CVE-2026-121639+3 related CVEs | Missing Authentication for Critical Function in WatchGuard AuthPoint Gateway | 9.2 group max | — | ||
| CVE-2026-76506 | Authenticated RCE in Cisco UCS Central Software web interface | 7.6 | — | ||
| CVE-2026-98432 | Use-after-free in Linux kernel IPv4 TCP options | 9.8 | <1% | PoC ×25 |
From the original article
1 min read at securityweek.com
Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws. The post Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.