CVE-2026-66153: SonicWall Netextender

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths.

Affected products

• SonicWall Netextender: up to and including 10.3.5

Published 2026-08-25. Last modified 2026-08-28.