High severity7.2NVD Advisory· Published Apr 10, 2025· Updated Apr 15, 2026

CVE-2025-23010

Description

An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to manipulate file paths.

Affected products

SonicWall/Netextenderllm-fuzzy

Patches

Vulnerability mechanics

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0006nvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000