SonicWall NetExtender Vulnerabilities Expose Linux Clients

Two high-severity vulnerabilities in the SonicWall NetExtender Linux client (CVE-2026-66152 and CVE-2026-66153, CVSSv3 8.8) allow attackers to write arbitrary files as root and manipulate file paths; administrators are advised to upgrade affected NetExtender Linux Client versions (<=10.3.5) to 10.3.6 or later immediately. The vendor reports no confirmed exploitation in the wild and Windows clients are unaffected.