This week, significant updates emerged in the cybersecurity landscape as Cisco and WatchGuard announced patches addressing multiple critical vulnerabilities in their systems. These updates are crucial for preventing potential exploitation through remote code execution and authentication flaws.
WatchGuard Addresses Critical Bugs
WatchGuard released five advisories, highlighting four critical vulnerabilities. The most severe, identified as CVE-2026-98432, carries a CVSS score of 9.8 and involves a use-after-free issue in the IPv4 networking segment of the Linux kernel. Although Fireware OS and WatchGuard AP include the vulnerable Linux kernel versions, they are not susceptible to the remote code execution threat these versions pose. However, Dimension, which runs on a vulnerable Ubuntu version, remains unpatched for now.
Additionally, WatchGuard resolved three critical authentication vulnerabilities (CVE-2026-121639, CVE-2026-121638, and CVE-2026-121640) and a high-severity integrity validation flaw (CVE-2026-121637) within the AuthPoint Authentication Gateway.
Cisco’s Security Fixes
Cisco has released a fix for CVE-2026-76506, a high-severity vulnerability in UCS Central Software. This flaw could allow authenticated users to execute arbitrary code or access sensitive information remotely. Despite the seriousness of these vulnerabilities, Cisco and WatchGuard report no known instances of these being exploited in the wild.
Furthermore, Cisco updated its advisory on a vulnerability known as Node2Shell, affecting 19 products. The flaw involves an out-of-bounds write issue in Google’s Brotli compression library, prompting organizations to urgently apply patches.
SonicWall’s Persistent Vulnerabilities
In contrast, SonicWall’s legacy Global Management System (GMS), which reached its End-of-Life in October 2025, remains affected by critical vulnerabilities. These include a critical file read bug (CVE-2026-109593) exploitable without authentication and a medium-severity SQL injection flaw (CVE-2026-109594) that threatens database integrity.
While these vulnerabilities persist in SonicWall’s GMS, the company has decided not to patch them. This decision raises concerns about potential exploitation and underlines the importance of transitioning to supported systems.
These updates underscore the ongoing necessity for organizations to remain vigilant and proactive in applying security patches to protect their systems from exploitation.
