CVE-2026-66152
Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root
CVE-2026-66152: Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
CVE-2026-66152 at a glance
- CISA KEV
- Not listed (catalog checked )
- Highest advisory severity
- High
- Vendor advisories
- 2 from SonicWall
- VulniPulse record
- Published · Updated
Is CVE-2026-66152 exploited?
No exploitation is reported in the sources VulniPulse tracks: CVE-2026-66152 is not in the CISA KEV catalog (checked ) and no tracked advisory for it reports exploitation. That is not proof the vulnerability cannot be exploited.
How do I fix CVE-2026-66152?
The tracked advisories that cover only this CVE do not list a fixed release yet. That does not mean no fix exists; check each vendor source below.
Vendor advisory comparison
SonicWall
2 advisories- Advisory severityHigh8.8
High [CVE-2026-66152 +1] NetExtender: Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write a…
SNWLID-2026-0013Source published Source updated
This bulletin covers 2 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.
- Related products — impact not confirmed
- NetExtender
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
- Advisory severityUnrated
Advisory [CVE-2026-66152] Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root
CVE-2026-66152Source published Source updated
A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root.
- Affected products in this advisory
- NetExtender
- Source-reported affected versions
- NetExtender 10.3.5 and earlier versions
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Browse the latest tracked CVEs or the CVEs listed in CISA KEV.
Android app · Google Play
Monitor future SonicWall CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.