WatchGuard has patched critical flaws in its AuthPoint authentication product, while SonicWall has said two flaws in its end-of-life Global Management System will remain unpatched, SecurityWeek reported on Thursday 5 November.

WatchGuard published five advisories, including four describing critical-severity bugs. The most severe is CVE-2026-98432, rated 9.8 out of 10, a use-after-free flaw in the IPv4 networking code of the Linux kernel. WatchGuard said its Fireware OS and WatchGuard access points contain the vulnerable kernel versions but are not affected by the remote code execution chain it opens, while its Dimension product runs a vulnerable Ubuntu version for which patches are not yet available.

AuthPoint fixes in version 7.6.0

The company rolled out fixes for three critical authentication issues in AuthPoint Authentication Gateway, tracked as CVE-2026-121639, CVE-2026-121638 and CVE-2026-121640, plus a high-severity integrity validation bug, CVE-2026-121637. Administrators should upgrade AuthPoint Gateway to version 7.6.0 or later.

SonicWall's legacy Global Management System, which reached end of life in October 2025, is affected by CVE-2026-109593, a critical file-read flaw that can be exploited without authentication, and CVE-2026-109594, a medium-severity SQL injection flaw. SonicWall will not patch them, so affected systems should be decommissioned or fully isolated. Neither WatchGuard nor Cisco, which also released patches this week, said it was aware of any of these flaws being exploited.

Sources: SecurityWeek, Cisco, WatchGuard Release Patches; SonicWall Won't Fix GMS Flaws, 5 November 2026; Sovereign GRC, SGRC Daily Cyber Brief, 4 November 2026.