Reported by 2 outlets
SonicWall NetExtender Flaw Lets Attackers Write Arbitrary Files as Root
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 1.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.51 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
SonicWall NetExtender Flaw Lets Attackers Write Arbitrary Files as Root
cyberpress.org · 48d ago · August 26th, 2026
SonicWall has disclosed two vulnerabilities in its NetExtender Linux VPN client , the more severe of which allows attackers to write arbitrary files to disk with root-level privileges. Tracked under advisory SNWLID-2026-0013 and published on August 25, 2026, the flaws carry a combined severity rating of 8.8 (High) on the CVSS v3 scale. The primary issue, CVE-2026-66152, is a path traversal vulnerability (CWE-29) rooted in the OPSWAT tarball handling process within the NetExtender Linux client. SonicWall NetExtender Flaw By crafting malicious file paths using directory traversal sequences such as ../ , an attacker can trick the client into extracting or writing files outside their intended directory, ultimately landing arbitrary content on the filesystem with root permissions. The flaw carries a CVSS vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , indicating it is network-exploitable with low attack complexity and no privileges required, though it does require user interaction. The second vulnerability, CVE-2026-66153, scores 7.0 and stems from improper link resolution prior to file access (CWE-59) in the NEService auto-upgrade mechanism. The service insecurely handles temporary files during the update process, opening a window for an attacker to manipulate file paths, a classic symlink or race-condition-style attack pattern. This flaw requires local access and low privileges, but no user interaction, and has an attack complexity rated as high. Affected Versions and Fix Both v
-
update from gbhackers.com
SonicWall NetExtender Flaw Lets Attackers Write Arbitrary Files as Root
gbhackers.com · 48d ago · August 26th, 2026
One of these is a path traversal flaw that could allow attackers to write arbitrary files with root privileges. […] The post SonicWall NetExtender Flaw Lets Attackers Write Arbitrary Files as Root appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .