CVE-2026-0516

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.

Scoring

Severity

MEDIUM

CVSS base score

6.5

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS probability

0.21%

CWE

CWE-644

Published

2026-08-05

Last modified

2026-08-05

Affected products

• SonicWall SonicOS
• SonicWall SonicOS
• SonicWall SonicOS
• SonicWall SonicOS
• SonicWall SonicOS

Weakness type

• CWE-644

Related vulnerabilities

• CVE-2026-69183 — Monkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass)
• CVE-2026-67179 — Genkit improper host header validation
• CVE-2026-66778 — Multiple vulnerabilities in SAP Business AI Platform (Approuter)
• CVE-2026-72574 — picocms Pico - Host Header Injection Enables Script Source Hijacking
• CVE-2026-48061 — Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header
• CVE-2026-21762 — Missing HTTP Security Headers in DevOps Loop
• CVE-2026-54477 — Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting Syntax
• CVE-2026-55791 — Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs

Markdown version · Browse all CVEs