If you're a company buying software from a vendor for network management, security, business operations, etc.. and it goes wrong, yes they are very very liable.

If you're a company buying software from a vendor for network management, security, business operations, etc.. and it goes wrong, yes they are very very liable. It's the whole reason why many companies avoid building anything on unsupported technology in the first place.