CVE-2025-23010

—

CVSS 3.1

7.2 high

EPSS

<1%p35

Published

Apr 10, 2025 (Apr 10, 2025)

Modified

Jun 17, 2026

Description

An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to manipulate file paths.

Weakness: CWE-59
Vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.