Cisco and WatchGuard ship patches for critical flaws; SonicWall leaves GMS bugs unfixed
Two GMS vulnerabilities will stay open on an end-of-life platform, while Dimension users wait for a fix to a critical Linux kernel bug.
Cisco and WatchGuard have shipped fixes for several flaws across their product lines, including remote code execution and authentication weaknesses. WatchGuard published five advisories, four of them rated critical, led by CVE-2026-98432 (CVSS 9.8), a use-after-free bug in the Linux kernel's IPv4 networking code; Fireware OS and WatchGuard AP run affected kernel versions but are not exposed to the exploit chain, while Dimension runs a vulnerable Ubuntu build with no patch yet. WatchGuard also fixed three critical and one high-severity AuthPoint Authentication Gateway issues, and Cisco patched a high-severity UCS Central Software flaw that could let authenticated attackers run code or leak data. Neither vendor knows of in-the-wild exploitation of these bugs. Separately, Cisco's updated advisory for the Brotli library flaw CVE-2026-111497 now lists 19 affected products with more under investigation, and SonicWall will leave two GMS vulnerabilities unpatched because the end-of-life platform no longer receives fixes.
Why it matters
For network security teams running these vendors' products, the split matters: WatchGuard and Cisco are delivering fixes for their most serious flaws, but customers on SonicWall's end-of-life GMS platform will not receive a patch for an unauthenticated file read bug and must rely on other protections. The gap also shows how an end-of-life date can leave serious flaws permanently open. Dimension customers are exposed to a vulnerable Ubuntu build until WatchGuard releases a patch, and the Brotli advisory's growing list of affected Cisco products means the scope of that problem is still being established.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.