【資安漏洞預警】SonicWall NetExtender Linux存在重大資安漏洞(CVE-2026-66152)

【行政公告】

公告單位	圖資處網路系統組
訊息類別	行政公告行政公告	公告對象	全體
公告主題	【資安漏洞預警】SonicWall NetExtender Linux存在重大資安漏洞(CVE-2026-66152) 【Security Vulnerability Alert】SonicWall NetExtender Linux Contains a Major Security Vulnerability(CVE-2026-66152)
公告內容	轉發台灣電腦網路危機處理暨協調中心資安訊息警訊 TWCERTCC-200-202608-00000021 [內容說明] SonicWall 針對旗下產品 SonicWall NetExtender Linux 發布重大資安漏洞公告 (CVE-2026-66152，CVSS：8.8)，此為路徑遍歷漏洞，攻擊者可以利用該漏洞以 root 身分寫入任意檔案。 [影響平台] NetExtender Linux Client 10.3.5(含)以前版本 [建議措施] 請更新至 NetExtender Linux Client 10.3.6(含)之後版本 [參考資料] 1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0013 Forwarded from Taiwan Computer Emergency Response Coordination Center Cybersecurity Information Alert TWCERTCC-200-202608-00000021 [Content Description] SonicWall has released a major security vulnerability advisory for its SonicWall NetExtender Linux product (CVE-2026-66152，CVSS：8.8). This is a path traversal vulnerability that allows attackers to exploit the vulnerability to write arbitrary files with root privileges. [Affected Platforms] NetExtender Linux Client 10.3.5(inclusive) and earlier versions [Recommended Measures] Please update to NetExtender Linux Client 10.3.6(inclusive) or later versions [References] 1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0013
相關訊息	參考資料
公告時間	2026/9/4 至 2027/3/4	點閱次數	296