Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws

WatchGuard issued five advisories this week, four covering critical bugs, the worst being CVE-2026-98432 (CVSS 9.8), a use-after-free in the Linux kernel's IPv4 stack. Fireware OS and WatchGuard AP ship the affected kernel code but aren't vulnerable to the resulting RCE chain, while Dimension runs a vulnerable Ubuntu build that still lacks a fix. WatchGuard also patched three critical authentication flaws (CVE-2026-121639, CVE-2026-121638, CVE-2026-121640) and a high-severity integrity-check bug (CVE-2026-121637) in its AuthPoint Authentication Gateway. Separately, Cisco fixed a high-severity flaw in UCS Central Software, CVE-2026-76506, which authenticated attackers could abuse for remote code execution or data exposure, and both vendors say none of these issues have been exploited so far. Cisco also expanded its list of products hit by the actively exploited Brotli library bug CVE-2026-111497 (Node2Shell) to 19, with more under review, while SonicWall confirmed its end-of-life GMS platform carries an unauthenticated critical file-read flaw (CVE-2026-109593) and a medium-severity SQL injection (CVE-2026-109594) that will stay unpatched.