CVE-2026-0516

MediumCVSS 6.5

Published: 05/08/2026(UTC)Updated: 28/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

10th percentile - higher than 10% of all known CVEs

Summary

SonicOS contains a vulnerability related to improper neutralization of HTTP headers for scripting syntax. A remote attacker can manipulate the Host header and redirect firewall management users to arbitrary web domains.

Risk Assessment

The risk is that attackers can perform phishing or redirect administrators to malicious sites, potentially leading to credential theft or compromise of the firewall management system.

Recommendation

It is recommended to immediately update SonicOS to a version that includes a fix for this vulnerability. Additionally, consider restricting access to the management interface to trusted IP addresses and using strong authentication mechanisms.

Other vulnerabilities in SonicOS

CVE-2026-0204High
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.

Original NVD description (English source)

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.