【Security Vulnerability Alert】SonicWall NetExtender Linux Contains a Major Security Vulnerability(CVE-2026-66152)

 
2026/9/4 ~ 2027/3/4
View Count:26

Forwarded from Taiwan Computer Emergency Response Coordination Center Cybersecurity Information Alert TWCERTCC-200-202608-00000021

[Content Description]
SonicWall has released a major security vulnerability advisory for its SonicWall NetExtender Linux product (CVE-2026-66152,CVSS:8.8). This is a path traversal vulnerability that allows attackers to exploit the vulnerability to write arbitrary files with root privileges.

[Affected Platforms]
NetExtender Linux Client 10.3.5(inclusive) and earlier versions

[Recommended Measures]
Please update to NetExtender Linux Client 10.3.6(inclusive) or later versions

[References]
1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0013

Files
system_update_alt參考資料
Top↑