7.2
High
CVE-2025-23010 An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and…
Description
An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to manipulate file paths.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| NetExtender | Versions not published |
Other CVEs of NetExtender
The 11 CVEs of NetExtender →
CVE-2026-66153
The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows…
7.0
High
CVE-2026-66152
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker…
8.8
High
CVE-2025-23009
A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an…
7.2
High
CVE-2025-23008
An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a…
7.2
High