SecurityWeekIonut Arghire
Cisco and WatchGuard patch flaws as SonicWall leaves GMS bugs unfixed
Part of the CVE-2026-98432 story · since 28 Oct
- Wed 28 Oct, 09:02 UTC. The Hacker News, first report. Anthropic AI model chains flaws into browser and OS exploits.
- Wed 28 Oct, 18:01 UTC. SecurityOnline, its first report on the story. Anthropic’s AI research uncovers flaws across major platforms.
- Thu 29 Oct, 17:30 UTC. The Hacker News. Linux TCP flaw rated 9.8 puts Ubuntu and Red Hat at risk.
- Fri 30 Oct, 09:00 UTC. SecurityOnline. Linux kernel flaw could give attackers remote root access.
- Sun 1 Nov, 17:03 UTC. cybersixt, its first report on the story. CVSS 9.8 Linux flaw lets attackers take root on Go servers by default.
- Mon 2 Nov, 15:30 UTC. SANS ISC, its first report on the story. SANS details detection of Linux Multipath TCP vulnerability.
- Mon 2 Nov, 19:30 UTC. The Hacker News. FBI blames North Korean TraderTraitor for $6.43 billion heist.
- Tue 3 Nov, 03:30 UTC. SecurityOnline. Arista patches two flaws that risk remote code execution.
- Tue 3 Nov, 10:30 UTC. SecurityOnline. Ubuntu tests a fix for a Linux kernel flaw rated 9.8.
- Tue 3 Nov, 13:31 UTC. The Hacker News. Red Hat fixes critical Linux TCP flaw enabling remote code execution.
- Thu 5 Nov, 13:30 UTC. SecurityWeek, its first report on the story. Cisco and WatchGuard patch flaws as SonicWall leaves GMS bugs unfixed. This article, 11th of 11.
Cisco and WatchGuard have published patches this week addressing a range of vulnerabilities, including remote code execution and authentication flaws. Security firm WatchGuard issued five advisories, four of which detail critical bugs. The most severe is CVE-2026-98432, a use-after-free issue in the Linux kernel’s IPv4 networking code, affecting WatchGuard’s Fireware OS and WatchGuard AP, with Dimension running a vulnerable Ubuntu version for which patches are not yet available, according to WatchGuard.
In addition, WatchGuard rolled out fixes for three critical authentication flaws (CVE-2026-121639, CVE-2026-121638, CVE-2026-121640) and a high-severity integrity validation bug (CVE-2026-121637) in AuthPoint Authentication Gateway. Cisco released fixes for CVE-2026-76506, a high-severity RCE vulnerability in UCS Central Software that could allow authenticated attackers to execute arbitrary code remotely or exfiltrate information. Neither vendor reports widespread exploitation at this time, stating they are not aware of in‑the‑wild activity.
The same report notes that Cisco simultaneously updated its advisory for CVE-2026-111497, known as Node2Shell, HTTP2Shell, and Broccoli2Shell—the out-of-bounds write flaw in Google's Brotli library that many organisations are patching across multiple products.
Separately, SonicWall warned that its Legacy Global Management System (GMS), now End-of-Life since October 2025, has two unpatched flaws: CVE-2026-109593, a critical unauthenticated file read, and CVE-2026-109594, a medium-severity SQL injection that could enable access to and modification of the GMS database. SecurityWeek attributes these findings to the respective advisories from Cisco, WatchGuard, and SonicWall; no exploitation in the wild is indicated for these issues.
How the story developed
11 articles from 5 outlets since 28 Oct. Still developing; the latest report was 2 hours ago. This was the 11th report, 8 days after the first.
- Wed 28 Oct, 09:02 UTC. The Hacker News, first report. Anthropic AI model chains flaws into browser and OS exploits.
- Wed 28 Oct, 18:01 UTC. SecurityOnline, its first report on the story. Anthropic’s AI research uncovers flaws across major platforms.
- Thu 29 Oct, 17:30 UTC. The Hacker News. Linux TCP flaw rated 9.8 puts Ubuntu and Red Hat at risk.
- Fri 30 Oct, 09:00 UTC. SecurityOnline. Linux kernel flaw could give attackers remote root access.
- Sun 1 Nov, 17:03 UTC. cybersixt, its first report on the story. CVSS 9.8 Linux flaw lets attackers take root on Go servers by default.
- Mon 2 Nov, 15:30 UTC. SANS ISC, its first report on the story. SANS details detection of Linux Multipath TCP vulnerability.
- Mon 2 Nov, 19:30 UTC. The Hacker News. FBI blames North Korean TraderTraitor for $6.43 billion heist.
- Tue 3 Nov, 03:30 UTC. SecurityOnline. Arista patches two flaws that risk remote code execution.
- Tue 3 Nov, 10:30 UTC. SecurityOnline. Ubuntu tests a fix for a Linux kernel flaw rated 9.8.
- Tue 3 Nov, 13:31 UTC. The Hacker News. Red Hat fixes critical Linux TCP flaw enabling remote code execution.
- Thu 5 Nov, 13:30 UTC. SecurityWeek, its first report on the story. Cisco and WatchGuard patch flaws as SonicWall leaves GMS bugs unfixed. This article, 11th of 11.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 11 articles as a listHide the list
- Wed 28 OctDay 02
- Anthropic AI model chains flaws into browser and OS exploits09:02 · The Hacker News · First report
- Anthropic’s AI research uncovers flaws across major platforms18:01 · SecurityOnline
- Thu 29 OctDay 11
- Linux TCP flaw rated 9.8 puts Ubuntu and Red Hat at risk17:30 · The Hacker News
- Fri 30 OctDay 21
- Linux kernel flaw could give attackers remote root access09:00 · SecurityOnline
Quiet for 2 days
Sun 1 NovDay 41- CVSS 9.8 Linux flaw lets attackers take root on Go servers by default17:03 · cybersixt · Picked up again
- Mon 2 NovDay 52
- SANS details detection of Linux Multipath TCP vulnerability15:30 · SANS ISC
- FBI blames North Korean TraderTraitor for $6.43 billion heist19:30 · The Hacker News
- Tue 3 NovDay 63
- Arista patches two flaws that risk remote code execution03:30 · SecurityOnline
- Ubuntu tests a fix for a Linux kernel flaw rated 9.810:30 · SecurityOnline
- Red Hat fixes critical Linux TCP flaw enabling remote code execution13:31 · The Hacker News
Quiet for 2 days
Thu 5 NovDay 81- Cisco and WatchGuard patch flaws as SonicWall leaves GMS bugs unfixed13:30 · SecurityWeek · This article, 11th of 11