612/69 Friday, November 6, 2026
Cisco has released an update to address CVE-2026-76506 in UCS Central Software, rated 7.6 on the CVSS scale. The vulnerability is caused by insufficient validation of data in HTTP requests. An attacker with a valid account on the system could send specially crafted requests that may lead to command execution or unauthorized access to sensitive information. Cisco recommends updating UCS Central Software 2.1 to version 2.1(2c), while users of version 2.0 and earlier should migrate to a fixed release. No workaround is available for the vulnerability. At the time of disclosure, there were no confirmed reports of exploitation in the wild.
WatchGuard has patched four vulnerabilities affecting AuthPoint Authentication Gateway versions prior to 7.6.0. These include CVE-2026-121639, which could allow an unauthenticated attacker to disrupt authentication services; CVE-2026-121638, which could enable interception or modification of data in transit; CVE-2026-121640, which could allow previously captured requests to be replayed to perform unauthorized administrative actions; and CVE-2026-121637, which could allow authentication results to be forged under specific conditions. All four vulnerabilities were fixed in version 7.6.0, and no active exploitation has been reported. WatchGuard also disclosed CVE-2026-98432, a Linux Kernel vulnerability with a CVSS score of 9.8. The company stated that Fireware OS and WatchGuard AP products are not affected by the publicly disclosed Remote Code Execution (RCE) attack method, while WatchGuard Dimension is awaiting a fix from Ubuntu.
SonicWall disclosed two vulnerabilities affecting Global Management System (GMS) version 9.5.2 and earlier. CVE-2026-109593 is rated Critical with a CVSS score of 9.1 and could allow an unauthenticated attacker to read local files on the system. CVE-2026-109594 is a Medium-severity SQL Injection vulnerability with a CVSS score of 6.8 that requires an attacker to have an account with elevated privileges before potentially accessing or modifying database information. SonicWall confirmed that no patches will be released because GMS has reached end of support and recommends migrating to Network Security Manager (NSM). Administrators still operating GMS should prioritize migration, restrict access to trusted management networks, and review system logs for suspicious activity during the transition.
Source: https://www.securityweek.com/cisco-watchguard-release-patches-sonicwall-wont-fix-gms-flaws