Technology companies Cisco and WatchGuard have issued a series of security updates to address high- and critical-severity vulnerabilities that lead to remote code execution and tampering with authentication processes. In contrast, SonicWall warned of the existence of serious vulnerabilities in its legacy product management platform without any intention of fixing them, given that the platform's support period has officially ended.
Cisco Targets UCS Vulnerability and Updates Alerts for Brotli Library
Cisco has patched a high-severity vulnerability bearing the identifier CVE-2026-76506 in the UCS Central Software infrastructure management program. This vulnerability allows authenticated attackers to remotely execute arbitrary code or exfiltrate sensitive information from compromised systems. The company confirmed that no exploitation attacks targeting this vulnerability in real-world environments have been detected so far.
Cisco also updated its security alerts regarding vulnerability CVE-2026-111497 (known by the names Node2Shell, HTTP2Shell, and Broccoli2Shell), which stems from an out-of-bounds write flaw within Google's Brotli data compression library. Cisco explained that the flaw currently affects 19 of its products, with investigations ongoing into dozens of other products, alongside about 12 affected products from Splunk solutions.
WatchGuard Patches AuthPoint Authentication Services
For its part, WatchGuard published five security advisories including the remediation of four vulnerabilities classified as critical. The most severe of these vulnerabilities came under the identifier CVE-2026-98432 with a rating of 9.8, which is a use-after-free issue in the Linux kernel IPv4 networking code.
The company explained that Fireware OS and WatchGuard AP devices include the affected kernel versions, but they are not vulnerable to the exploitation chain that allows remote code execution. Regarding the Dimension platform, which runs an affected version of Ubuntu, the company confirmed that updates are still under development. At the same time, WatchGuard rolled out fixes for three critical vulnerabilities in authentication mechanisms and a high-severity vulnerability in data integrity verification within AuthPoint Authentication Gateway portals.
SonicWall Refuses to Fix Unsupported GMS Platform
On the other hand, SonicWall warned its customers that the legacy Global Management System (GMS) centralized management platform, which reached its end-of-life (EOL) in October 2025, contains two security vulnerabilities that will not be fixed with official updates.
These flaws include vulnerability CVE-2026-109593, a critical unauthenticated file read vulnerability, in addition to the medium-severity vulnerability CVE-2026-109594 related to SQL injection, which enables attackers to access and modify the platform's database.
What Changes Practically for Organizations?
These updates place cybersecurity teams before two different courses of action:
- Immediate Updating: Organizations relying on Cisco and WatchGuard solutions must apply the released software updates immediately to avoid any future exploitation of the vulnerabilities discovered in UCS and AuthPoint systems.
- Retiring Legacy Systems: SonicWall's stance regarding the GMS platform forces network administrators to quickly transition to alternative supported management solutions and block access to legacy platforms to protect internal databases and files from severe risks.