Forwarded from Taiwan Computer Emergency Response Coordination Center Cybersecurity Information Alert TWCERTCC-200-202608-00000021
[Content Description]
SonicWall has released a major security vulnerability advisory for its SonicWall NetExtender Linux product (CVE-2026-66152,CVSS:8.8). This is a path traversal vulnerability that allows attackers to exploit the vulnerability to write arbitrary files with root privileges.
[Affected Platforms]
NetExtender Linux Client 10.3.5(inclusive) and earlier versions
[Recommended Measures]
Please update to NetExtender Linux Client 10.3.6(inclusive) or later versions
[References]
1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0013