SonicWall NetExtender Flaw Lets Attackers Write Arbitrary Files as Root

Gbhackers •Divya • August 26, 2026

SonicWall has released security updates for two high-severity vulnerabilities in its NetExtender Linux Client. One of these is a path traversal flaw that could allow attackers to write arbitrary files with root privileges. The most severe issue, tracked as CVE-2026-66152, has a CVSS score of 8.8/10 and affects NetExtender Linux Client versions 10.3.5 and earlier. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall NetExtender Vulnerabilities Enable Root File Writes SonicWall has disclosed two critical vulnerabilities in its NetExtender Linux Client, allowing attackers to write arbitrary files with root privileges. The vulnerabilities affect versions 10.3.5 and earlier, with the most severe issue tracked as CVE-2026-66152, which has a CVSS score of 8.8/10. SonicWall released a patch in version 10.3.6 to address these issues. The vulnerabilities could potentially lead to significant unauthorized access and control over affected systems. Users are urged to upgrade to the latest version to mitigate risks. The vulnerabilities were published on August 25, 2026, and are now publicly known. Organizations using the affected versions should take immediate action to secure their systems. 2 sources 71

Extracted Entities

SonicWall NetExtender Flaw Lets Attackers Write Arbitrary Files as Root

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Platforms (1)