SonicWall NetExtender vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20242
3. 20254
4. 20262

Newest CVEs

• CVE-2026-66153

  The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths.

  SonicWall · NetExtender

  High7.0
• CVE-2026-66152

  A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.

  SonicWall · NetExtender

  High8.8
• CVE-2025-23010

  An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an…

  SonicWall · NetExtender

  High7.2
• CVE-2025-23009

  A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to trigger an arbitrary file…

  SonicWall · NetExtender

  High7.2
• CVE-2025-23008

  An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a low privileged attacker to modify…

  SonicWall · NetExtender

  High7.2
• CVE-2025-23007

  A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows system files, potentially leading to…

  SonicWall · NetExtender

  Medium5.5
• CVE-2024-29014

  Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when…

  SonicWall · NetExtender

  High7.1
• CVE-2023-6340

  SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been…

  SonicWall · Capture Client

  Medium5.5
• CVE-2023-44220

  SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL…

  SonicWall · NetExtender

  High7.3
• CVE-2023-44218

  A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level…

  SonicWall · NetExtender

  High8.8