CVE-2026-0516
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
SonicOS contains a vulnerability related to improper neutralization of HTTP headers for scripting syntax. A remote attacker can manipulate the Host header and redirect firewall management users to arbitrary web domains.
Risk Assessment
The risk is that attackers can perform phishing or redirect administrators to malicious sites, potentially leading to credential theft or compromise of the firewall management system.
Recommendation
It is recommended to immediately update SonicOS to a version that includes a fix for this vulnerability. Additionally, consider restricting access to the management interface to trusted IP addresses and using strong authentication mechanisms.
Other vulnerabilities in SonicOS
See all- CVE-2020-5135CriticalActively exploited
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. It affects SonicOS Gen 6 versions 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.
- CVE-2026-0206Medium
A post-authentication stack-based buffer overflow vulnerability in SonicOS allows a remote attacker to crash a firewall.
- CVE-2026-0205Medium
A post-authentication path traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services. The attacker must be authenticated to exploit this flaw.
- CVE-2026-0204High
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.
Original NVD description (English source)
A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS