Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws

https://www.securityweek.com/wp-content/uploads/2025/07/software-vulnerability-patch-update.jpg

Cisco and WatchGuard this week announced patches for a handful of vulnerabilities in their products, including remote code execution (RCE) and authentication flaws.

WatchGuard published five advisories, including four describing critical-severity bugs. The most severe is CVE-2026-98432 (CVSS score of 9.8), a use-after-free issue in the IPv4 networking code of the Linux kernel.

Fireware OS and WatchGuard AP contain the vulnerable Linux kernel versions, but are not affected by the RCE exploit chain it opens the door to. Dimension runs a vulnerable Ubuntu version, but patches are not available yet, WatchGuard says.

The company rolled out fixes for three critical authentication issues (CVE-2026-121639, CVE-2026-121638, and CVE-2026-121640) and a high-severity integrity validation bug (CVE-2026-121637) in AuthPoint Authentication Gateway.

Cisco released fixes for CVE-2026-76506, a high-severity vulnerability in UCS Central Software that could allow authenticated attackers to execute arbitrary code remotely or leak information.

Both WatchGuard and Cisco say they are not...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE

Read more