CVE-2026-66152

HighCVSS 8.8

Published: 25/08/2026(UTC)Updated: 31/08/2026(UTC)Translated: 31/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

33th percentile - higher than 33% of all known CVEs

Summary

A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary files as root.

Risk Assessment

An attacker can write arbitrary files as root, potentially leading to full system compromise.

Recommendation

Update SonicWall NetExtender client to the latest version. Restrict client usage to trusted environments.

Other vulnerabilities in SonicWall NetExtender

CVE-2026-66153High
The NEService auto-upgrade process insecurely handles temporary files in the SonicWall NetExtender Linux client, allowing an attacker to manipulate file paths.

Original NVD description (English source)

A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS