Cisco and WatchGuard have released security updates for vulnerabilities affecting enterprise infrastructure and network security products, according to a report by SecurityWeek. In the same update cycle, SonicWall was reported as not planning fixes for certain flaws affecting older versions of its Global Management System (GMS).

For European businesses, the story is less about individual vendor names and more about a familiar operational risk: security weaknesses in core management systems can remain exposed if patching is delayed or if organisations continue running legacy software that no longer receives updates.

What happened

SecurityWeek reported that Cisco patched a remote code execution vulnerability in UCS Central Software. Remote code execution flaws are particularly serious because they may allow an attacker to run malicious code on an affected system if the technical conditions for exploitation are met.

WatchGuard also released fixes for vulnerabilities described as involving authentication and man-in-the-middle issues. Authentication flaws can affect how users or systems prove identity, while man-in-the-middle weaknesses may create opportunities for attackers to intercept or alter communications under certain conditions.

The report also said SonicWall would not fix certain vulnerabilities in older GMS versions. Based on the source summary provided, this appears to affect legacy software rather than indicating that all supported SonicWall products are unpatched. Businesses should therefore verify the exact product versions they use rather than assuming broad exposure.

Why it matters for European businesses

These products sit close to critical business operations: server management, security administration, network oversight and centralised device control. Vulnerabilities in such systems can have a disproportionate impact because they may affect the tools used to manage wider IT environments.

For SMEs and mid-sized organisations, this creates several practical concerns:

• Patch timing matters: once fixes are available, delayed deployment can leave known weaknesses open for longer.
• Legacy systems create ongoing risk: if a vendor no longer supports a product version, businesses may need to upgrade, isolate or replace it rather than waiting for a fix that will not arrive.
• Management platforms are high-value targets: attackers often focus on centrally managed systems because compromising one platform can provide broader access.
• Compliance exposure may increase: organisations in regulated sectors may need to show they are managing known vulnerabilities appropriately, especially where cybersecurity governance obligations apply.

For European companies working under GDPR, NIS2-related security programmes, customer security requirements or cyber insurance conditions, unsupported software can become both a technical and governance issue. The exact legal obligations depend on the organisation’s sector, size and role, so companies should not assume every framework applies in the same way.

Who may be affected

The most affected organisations are those using Cisco UCS Central Software, relevant WatchGuard products, or older SonicWall GMS deployments in production environments. This may include:

• SMEs with on-premise or hybrid IT infrastructure
• Managed service providers and digital agencies overseeing client networks
• E-commerce businesses that depend on secure, continuously available infrastructure
• Internal IT and security teams responsible for firewall, server or device management
• Regulated organisations that must document vulnerability handling and system support status

Businesses that outsource infrastructure management should also ask service providers whether any affected products are in use and whether remediation steps have already been scheduled.

What companies should consider

• Identify exposure: confirm whether any affected Cisco, WatchGuard or SonicWall products and versions are present in your environment.
• Apply available patches promptly: prioritise internet-facing or centrally managed systems where business impact from compromise would be highest.
• Review legacy deployments: if older SonicWall GMS versions are still in use, assess upgrade, migration or compensating controls instead of expecting future patches.
• Check support status: verify whether critical security tools are still within vendor support lifecycles.
• Strengthen segmentation and access controls: limit administrative exposure around management systems and review who can reach them.
• Document actions: keep records of patch decisions, upgrade plans and risk treatment steps for internal governance, customer due diligence and possible compliance reviews.

The broader lesson for European businesses is straightforward: patching is only one part of vulnerability management. Where products are aging out of support, organisations may need budget and planning decisions, not just technical updates, to reduce security risk.