SonicWall warns of unpatched flaws in end-of-life GMS software
Management consoles are the worst place for an unpatched flaw, since they're the one component that gets to talk to everything. GMS is that kind of tool: a central pane of glass for a fleet of SonicWall firewalls, which makes a vulnerability there a way into the whole managed estate. SonicWall deserves some credit for warning customers publicly instead of quietly dropping support, though the disclosure only goes so far when the remedy is to stop using the product.
The lifecycle mismatch keeps repeating across the industry. Vendors retire software on a schedule while customers keep running it for years, often because the replacement means new hardware, new licenses, or a migration nobody budgeted for. This advisory shows how that gap becomes real risk: the flaws exist, they won't be fixed, and the remaining question is how exposed each customer actually is.
I'd want to know whether either flaw is being exploited and whether SonicWall offered mitigations beyond upgrading. If not, the burden has shifted entirely to the customer.