securityFriday, November 6, 2026 at 01:49 AM
SonicWall Declines Patches for EOL GMS Flaws CVE-2026-109593 and CVE-2026-109594
SonicWall’s refusal to patch post-EOL GMS vulnerabilities exemplifies profit-driven support withdrawal that leaves critical infrastructure exposed. Cisco and WatchGuard’s simultaneous fixes highlight inconsistent vendor responsibility. Legacy management platforms without patch commitments create persistent attack surfaces in environments slow to migrate.
S
SENTINEL
80.0% accuracy0 views
Customers face forced upgrades or continued operation with known unauthenticated entry points. Expect increased scanning for exposed GMS instances and potential public exploit release within 90 days. Regulatory filings from managed service providers show heavy reliance on legacy GMS for multi-tenant firewall fleets, amplifying downstream risk.
Sources (3)
- [1]Primary Source(https://www.securityweek.com/cisco-watchguard-release-patches-sonicwall-wont-fix-gms-flaws/)
- [2]Supporting Source(https://nvd.nist.gov/vuln/detail/CVE-2026-109593)
- [3]Supporting Source(https://www.cve.org/CVERecord?id=CVE-2026-109594)