AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SonicWallCVE-2026-66153

SonicWall NetExtender: link following

SonicWall

CVE-2026-66153 · Published Aug 25, 2026 · updated Aug 28, 2026

High7.0
No fix yet
SonicWall advisory

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths.

Affected versions

PackageAffectedFixed in
NetExtender
Product
<= 10.3.5 and earlier versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-59

More SonicWall advisories

All SonicWall
Critical 9.1Sep 4SonicWall Network Security Manager (NSM): path traversalCVE-2026-81939no fix yetCritical 9.1Sep 4SonicWall Network Security Manager (NSM): missing authorizationCVE-2026-78328no fix yetCritical 9.1Sep 4SonicWall Network Security Manager (NSM): command injectionCVE-2026-78327no fix yetHigh 7.8Sep 1SonicWall SMA1000: command injectionCVE-2026-83549no fix yetCritical 10.0Sep 1SonicWall SMA1000: server-side request forgeryCVE-2026-83548no fix yetHigh 8.8Aug 25SonicWall NetExtender: path traversalCVE-2026-66152no fix yet