AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SonicWallCVE-2026-66152

SonicWall NetExtender: path traversal

SonicWall

CVE-2026-66152 · Published Aug 25, 2026 · updated Aug 31, 2026

High8.8
No fix yet
SonicWall advisory

A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.

Affected versions

PackageAffectedFixed in
NetExtender
Product
<= 10.3.5 and earlier versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-29

More SonicWall advisories

All SonicWall
Critical 9.1Sep 4SonicWall Network Security Manager (NSM): path traversalCVE-2026-81939no fix yetCritical 9.1Sep 4SonicWall Network Security Manager (NSM): missing authorizationCVE-2026-78328no fix yetCritical 9.1Sep 4SonicWall Network Security Manager (NSM): command injectionCVE-2026-78327no fix yetHigh 7.8Sep 1SonicWall SMA1000: command injectionCVE-2026-83549no fix yetCritical 10.0Sep 1SonicWall SMA1000: server-side request forgeryCVE-2026-83548no fix yetHigh 7.0Aug 25SonicWall NetExtender: link followingCVE-2026-66153no fix yet