CVE-2026-0516 - Vulnerability Details - OpenCVE

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Sonicwall	Sonicos

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Sonicwall	Sonicos

References

Link	Providers
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0009

History

Wed, 05 Aug 2026 20:30:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 05 Aug 2026 13:45:00 +0000

Type	Values Removed	Values Added
Title		Improper HTTP Header Handling Enables Arbitrary Redirection
First Time appeared		Sonicwall Sonicwall sonicos
Vendors & Products		Sonicwall Sonicwall sonicos

Wed, 05 Aug 2026 12:30:00 +0000

Type	Values Removed	Values Added
Description		A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.
Weaknesses		CWE-644
References		https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0009

MITRE

Status: PUBLISHED

Assigner: sonicwall

Published: 2026-08-05T11:50:03.323Z

Updated: 2026-08-05T19:57:27.177Z

Reserved: 2025-12-12T10:06:41.342Z

Link: CVE-2026-0516

Vulnrichment

Updated: 2026-08-05T19:30:40.111Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-05T13:30:05Z

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0516", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "state": "PUBLISHED", "assignerShortName": "sonicwall", "dateReserved": "2025-12-12T10:06:41.342Z", "datePublished": "2026-08-05T11:50:03.323Z", "dateUpdated": "2026-08-05T19:57:27.177Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2026-08-05T19:57:27.177Z"}, "datePublic": "2026-08-05T11:46:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-644", "description": "CWE-644 Improper neutralization of HTTP headers for scripting syntax", "type": "CWE"}]}], "affected": [{"vendor": "SonicWall", "product": "SonicOS", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "6.5.5.2-28n and older versions"}, {"status": "affected", "version": "7.0.1-5169 and older versions"}, {"status": "affected", "version": "7.3.3-7015 and older versions"}, {"status": "affected", "version": "8.2.1-8010 and older versions"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains."}]}], "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0009", "tags": ["vendor-advisory"]}], "credits": [{"lang": "en", "value": "Joshua Chan", "type": "finder"}], "source": {"advisory": "SNWLID-2026-0009", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-08-05T19:30:25.010309Z", "id": "CVE-2026-0516", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-05T19:30:51.128Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-0516", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-05T19:30:25.010309Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-05T19:30:40.111Z"}}], "cna": {"source": {"advisory": "SNWLID-2026-0009", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Joshua Chan"}], "affected": [{"vendor": "SonicWall", "product": "SonicOS", "versions": [{"status": "affected", "version": "6.5.5.2-28n and older versions"}, {"status": "affected", "version": "7.0.1-5169 and older versions"}, {"status": "affected", "version": "7.3.3-7015 and older versions"}, {"status": "affected", "version": "8.2.1-8010 and older versions"}], "platforms": ["Linux"], "defaultStatus": "unknown"}], "datePublic": "2026-08-05T11:46:00.000Z", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0009", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.", "supportingMedia": [{"type": "text/html", "value": "A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-644", "description": "CWE-644 Improper neutralization of HTTP headers for scripting syntax"}]}], "providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2026-08-05T19:57:27.177Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0516", "state": "PUBLISHED", "dateUpdated": "2026-08-05T19:57:27.177Z", "dateReserved": "2025-12-12T10:06:41.342Z", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "datePublished": "2026-08-05T11:50:03.323Z", "assignerShortName": "sonicwall"}, "dataVersion": "5.2"}