CVE-2026-66152
High · 8.8CVSS
8.8
EPSS
—
Published
Aug 25, 2026
CISA due date
—
The record
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-10732 All versions of the package decompress are vulnerable to Arbitrary File Write via Archive… CWE-29
- CVE-2026-24217 NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path… CWE-29
- CVE-2026-5627 A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and… CWE-29
- CVE-2025-15036 A path traversal vulnerability exists in the `extract_archive_to_dir` function within the… CWE-29
- CVE-2026-30828 Wallos is an open-source, self-hostable personal subscription tracker. CWE-29
- CVE-2025-66608 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. CWE-29
- CVE-2024-2356 A Local File Inclusion (LFI) vulnerability exists in the '/reinstall_extension' endpoint… CWE-29
- CVE-2025-12790 A flaw was found in Rubygem MQTT. CWE-29