Skip to content
Cisco and WatchGuard Patch Critical Vulnerabilities; SonicWall Leaves GMS Unpatched

Cisco and WatchGuard Patch Critical Vulnerabilities; SonicWall Leaves GMS Unpatched

First seen 5 Nov 2026, 14:46 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 5, 2026 at 14:48 UTC
  • •Cisco and WatchGuard released patches for critical vulnerabilities on November 4, 2026.
  • •SonicWall's GMS remains unpatched for two significant vulnerabilities, including a critical flaw.
  • •WatchGuard's CVE-2026-98432 has a CVSS score of 9.8, indicating severe risk.

Cisco and WatchGuard have released patches for multiple vulnerabilities, including critical flaws with CVSS scores above 9.0. WatchGuard addressed five advisories, notably CVE-2026-98432, a critical use-after-free vulnerability in the Linux kernel with a CVSS score of 9.8. Cisco patched CVE-2026-76506, a high-severity flaw in UCS Central Software that could allow remote code execution. Both companies report no known exploitation of these vulnerabilities. In contrast, SonicWall's Global Management System (GMS), which reached end-of-life in October 2025, has two unpatched vulnerabilities: CVE-2026-109593, a critical file read bug, and CVE-2026-109594, a medium-severity SQL injection flaw. The lack of patches for SonicWall's legacy system raises concerns for users still relying on GMS.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-10-15
CVE-2026-98432 published
A critical use-after-free vulnerability in the Linux kernel was disclosed, affecting WatchGuard products.
Securityweek
2026-11-03
SonicWall discloses unpatched vulnerabilities
SonicWall announced two critical vulnerabilities in its GMS, which will not be fixed as the product reached end-of-life.
Securityweek
2026-11-03
CVE-2026-109593 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-11-03
CVE-2026-109594 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-11-04
Patches released by Cisco and WatchGuard
Cisco and WatchGuard published updates for multiple vulnerabilities, including critical flaws in their products.
Securityweek
2026-11-04
CVE-2026-76506 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (3)

Following this threat?

Track Cisco and CVE-2026-109593 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (30)

1 / 3

Common questions

What vulnerabilities did Cisco patch?
Cisco patched CVE-2026-76506, a high-severity vulnerability allowing remote code execution.
Are there any known exploits for these vulnerabilities?
Both Cisco and WatchGuard report no known exploitation of the vulnerabilities at this time.
What should SonicWall GMS users do?
SonicWall GMS users should consider migrating to supported products, as the vulnerabilities will remain unpatched.