SonicWall Global Management System Vulnerable, No Patches
SonicWall's Global Management System is vulnerable to attack, but the platform no longer gets updates. Administrators must move to its successor.

SonicWall's Global Management System (GMS), a platform used to manage IT security appliances centrally, contains a security vulnerability. The problem: the product no longer receives updates, so a fix for the current software is not on the way. Administrators who still run GMS are being told to upgrade to the successor product.
Why this matters
A management platform sits at a sensitive point in a network. It is the tool through which many security appliances are configured, monitored and controlled. A weakness in that layer can therefore matter far more than a flaw in a single device, because the platform typically has broad reach across the devices it administers.
Because GMS has reached the end of its support, the usual remedy of installing a patch is off the table. Organizations that have kept the platform running for years now face a forced migration instead of a routine update window. That makes the task more urgent and more laborious, since a switch to a different product usually requires planning, testing and a check of existing configurations.
What administrators should do
The recommendation is clear: move to the successor of the Global Management System. Until that is done, operators should treat the existing installation as a risk. Sensible interim thinking, in line with general security practice, includes limiting who can reach the management interface and reviewing where the platform is exposed. The company's advisory and the product documentation remain the authoritative sources for the exact migration path and any version requirements.
The case is a reminder that unsupported software in security infrastructure is a liability. Tools that manage firewalls and other protective systems are attractive targets, and once a vendor stops shipping updates, every newly found flaw stays open permanently. Teams should keep an inventory of the products they rely on and track their support lifecycles, so an end-of-life announcement does not turn into an emergency once a vulnerability surfaces.
Apps worth a look
Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.
Talk to an AI conversation partner; every sentence comes back corrected and explained in your language. 9 languages, A1 to C2.
Open EDIFACT and X12 messages, see every segment explained, convert to JSON/XML, export PDF and Excel. Runs locally, no upload.
Pick who it is for, the occasion and their personality. The search engine reads product descriptions from local shops and ranks what fits. Free, no sign-up.
More from this day
See all →
GOG GALAXY Is Coming Natively to Linux After 18 Years
Claude Code accused of leaking users' email addresses to websites

Alta Ares wins six NATO counter-drone lots in first big deal

NCBR Sets Aside PLN 25 Million for International AI R&D Projects
More in: Security
See all →
LINE Adds Passkey Login to Simplify Switching Phones

Japan's National Cyber Office Urges Firms to Fix Basic Security Gaps

Flock Safety loses ground as 10+ US localities drop its cameras
