CVE Catalog
CVE-2026-66153
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0.19%
8th percentile - higher than 8% of all known CVEs
Summary
The NEService auto-upgrade process insecurely handles temporary files in the SonicWall NetExtender Linux client, allowing an attacker to manipulate file paths.
Risk Assessment
An attacker can replace temporary files, potentially leading to unauthorized system changes or privilege escalation.
Recommendation
Update the SonicWall NetExtender client to a patched version or restrict access to the update process.
Other vulnerabilities in SonicWall NetExtender
Original NVD description (English source)
The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths.