SonicWall Warns of Unpatched Flaws in End-of-Life GMS Software
Two security vulnerabilities affect deprecated Global Management System, no patches planned
Key Takeaways
- Two unpatched vulnerabilities affect end-of-life SonicWall GMS software.
- No patches will be released, leaving systems permanently exposed.
- Organizations must migrate to supported platforms to mitigate risk.
- No public exploits confirmed, but the lack of patches increases long-term risk.
Quick answers
- What happened?
- SonicWall has alerted customers that two security flaws in the end-of-life Global Management System (GMS) will not receive patches, leaving deployed systems permanently vulnerable. The advisory urges immediate migration to supported platforms.
- Which products are affected?
- Global Management System (GMS)
- What should defenders do?
- SonicWall recommends migrating to supported platforms and discontinuing use of end-of-life GMS software.
SonicWall has warned customers of two security flaws affecting the end-of-life Global Management System (GMS) that will not be patched. The vulnerabilities impact deprecated GMS software versions that have reached end-of-life, meaning SonicWall will not develop fixes. Organizations running these unpatched systems remain exposed to potential remote exploitation, with no available remedy from the vendor. The advisory emphasizes that the only effective mitigation is to migrate to supported SonicWall platforms and discontinue use of the end-of-life GMS software. No public exploits or zero-day reports were confirmed at the time of the advisory, but the end-of-life status confirms that systems will remain permanently vulnerable without a patch. The company recommends that affected organizations prioritize migration to mitigate risk.
Security Details
Two security flaws in end-of-life Global Management System (GMS) software that will not be patched by SonicWall.
Affected products
Global Management System (GMS)
Mitigation
SonicWall recommends migrating to supported platforms and discontinuing use of end-of-life GMS software.
Sources
BleepingComputer
SonicWall warns of unpatched flaws in end-of-life GMS software
Nov 4, 2026 · 14:42
Original link
Related Security News
Critical Vulnerability in APT Package Manager Enables MitM Package Swapping on Debian and Ubuntu Systems
A security vulnerability in the Advanced Package Tool (APT) used by Debian and Ubuntu distributions has been disclosed. The flaw stems from APT's default retry-on-failure behavior, which, when combined with a man-in-the-middle (MitM) position, allows an attacker to intercept and swap package downloads. The substituted package executes with root privileges during installation, bypassing standard verification checks. Advisories were published on November 4, 2026, by Debian, Ubuntu, and the APT Project. Users on Debian 12 and affected Ubuntu versions with default APT configurations are at risk.
