File Path Manipulation Vulnerability in SonicWall NetExtender Linux Client
CVE-2026-66153

7HIGH

Key Information:

Vendor

Sonicwall
Status
Netextender
Vendor
CVE Published:
25 August 2026

What is CVE-2026-66153?

The SonicWall NetExtender Linux client contains a flaw in its auto-upgrade process due to insecure handling of temporary files. This vulnerability allows attackers to interfere with file paths, potentially leading to unauthorized access or data manipulation. It is crucial for users to apply necessary security measures to mitigate potential risks associated with this exposure.

Affected Version(s)

NetExtender Linux 10.3.5 and earlier versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.