CVE Catalog

CVE-2026-66152

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.40%

33th percentile - higher than 33% of all known CVEs

Summary

A path traversal vulnerability in the OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary files as root.

Risk Assessment

An attacker can overwrite critical system files, leading to full system compromise.

Recommendation

Update the SonicWall NetExtender client to a patched version and limit trust in unverified packages.

Other vulnerabilities in SonicWall NetExtender

Original NVD description (English source)

A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS