Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
SonicWall NetExtender Flaw Lets Attackers Write Arbitrary Files as Root
Excerpt
SonicWall has disclosed two vulnerabilities in its NetExtender Linux VPN client , the more severe of which allows attackers to write arbitrary files to disk with root-level privileges. Tracked under advisory SNWLID-2026-0013 and published on August 25, 2026, the flaws carry a combined severity rating of 8.8 (High) on the CVSS v3 scale. The primary issue, CVE-2026-66152, is a path traversal vulnerability (CWE-29) rooted in the OPSWAT tarball handling process within the…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-66153 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-66152 | Medium | Score 54/100 | First seen |
IOC Relationship Graph
Building graph…