Skip to content

Known vulnerabilities in SonicWall NetExtender

Is your version affected?

CVE Summary Score Published
CVE-2026-66153 The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows… 7.0 High Aug 25, 2026
CVE-2026-66152 A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker… 8.8 High Aug 25, 2026
CVE-2025-23010 An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and… 7.2 High Apr 10, 2025
CVE-2025-23009 A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an… 7.2 High Apr 10, 2025
CVE-2025-23008 An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a… 7.2 High Apr 10, 2025
CVE-2025-23007 A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows… 5.5 Medium Jan 30, 2025
CVE-2024-29014 Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an… 7.1 High Jul 18, 2024
CVE-2023-6340 SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with… 5.5 Medium Jan 17, 2024
CVE-2023-44220 SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking… Not rated Oct 27, 2023
CVE-2023-44218 A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host… 8.8 High Oct 3, 2023
CVE-2023-44217 A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier… 7.8 High Oct 3, 2023

Other SonicWall products