Vulnerability in SonicWall Netextender
CVE-2026-66153
The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths.
Affected products
- Sonicwall Netextender — versions 10.3.5 and earlier versions
Weakness classification (CWE)
References
- PSIRT@sonicwall.com (vendor-advisory)