CVE-2026-66152: SonicWall Netextender

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.

Affected products

• SonicWall Netextender: up to and including 10.3.5

Published 2026-08-25. Last modified 2026-08-31.