CVE-2026-66153

SonicWall / NetExtender PUBLISHED

Description (CNA)

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths.

Affected (CNA)

Vendor / product	Versions
SonicWall / NetExtender	affected 10.3.5 and earlier versions

CWE

CWE-59

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0013

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.