Sign in

8.8 High

CVE-2026-66152 A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker…

Description

A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.

Affected products and versions

Product	Affected versions	Fixed in
NetExtender	Versions not published

The 11 CVEs of NetExtender →

CVE-2026-66153 The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows… 7.0 High CVE-2025-23010 An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and… 7.2 High CVE-2025-23009 A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an… 7.2 High CVE-2025-23008 An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a… 7.2 High

Do you use NetExtender?

Track this CVE Watch NetExtender Check my SBOMs

cveye.io/en/cve/CVE-2026-66152

Timeline

Published August 25, 2026
Last modified August 31, 2026

References

psirt.global.sonicwall.com psirt.global.sonicwall.com

Track this CVE