SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-66153

HIGH · CVSS 7 EPSS 0.19%

Source: NVD + CISA KEV + EPSS · Published 2026-08-25 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The SonicWall NetExtender Linux client is vulnerable due to its insecure handling of temporary files during the NEService auto-upgrade process, allowing attackers to manipulate file paths. This could lead to unauthorized file access or execution of malicious code. Organizations using this client should prioritize addressing this vulnerability to mitigate potential exploitation risks.

CVE
CVE-2026-66153
Severity
HIGH
CVSS
7
EPSS
0.19%
Linux

Original NVD Description

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths.