SonicWall NetExtender Vulnerabilities Allow an Attacker to Write Arbitrary Files as Root

Cybersecuritynews •Abinaya • August 26, 2026

SonicWall has disclosed two security vulnerabilities in its NetExtender Linux client, including a critical path traversal flaw that could allow an attacker to write arbitrary files with root privileges. The issues affect NetExtender Linux Client versions 10.3.5 and earlier; the fixed release is version 10.3.6 and later. Tracked as CVE-2026-66152, the more severe vulnerability received […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall NetExtender Vulnerabilities Enable Root File Writes SonicWall has disclosed two critical vulnerabilities in its NetExtender Linux Client, allowing attackers to write arbitrary files with root privileges. The vulnerabilities affect versions 10.3.5 and earlier, with the most severe issue tracked as CVE-2026-66152, which has a CVSS score of 8.8/10. SonicWall released a patch in version 10.3.6 to address these issues. The vulnerabilities could potentially lead to significant unauthorized access and control over affected systems. Users are urged to upgrade to the latest version to mitigate risks. The vulnerabilities were published on August 25, 2026, and are now publicly known. Organizations using the affected versions should take immediate action to secure their systems. 2 sources 71

Extracted Entities

SonicWall NetExtender Vulnerabilities Allow an Attacker to Write Arbitrary Files as Root

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)