{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0516", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "state": "PUBLISHED", "assignerShortName": "sonicwall", "dateReserved": "2025-12-12T10:06:41.342Z", "datePublished": "2026-08-05T11:50:03.323Z", "dateUpdated": "2026-08-05T11:50:03.323Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2026-08-05T11:50:03.323Z"}, "datePublic": "2026-08-05T11:46:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-644", "description": "CWE-644 Improper neutralization of HTTP headers for scripting syntax", "type": "CWE"}]}], "affected": [{"vendor": "SonicWall", "product": "SonicOS", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "6.5.5.1-6n and older versions"}, {"status": "affected", "version": "7.0.1-5169 and older versions"}, {"status": "affected", "version": "7.3.3-7015 and older versions"}, {"status": "affected", "version": "8.2.1-8010 and older versions"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains."}]}], "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0009", "tags": ["vendor-advisory"]}], "credits": [{"lang": "en", "value": "Joshua Chan", "type": "finder"}], "source": {"advisory": "SNWLID-2026-0009", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}}}

{}

{}

{}

{"affected": [{"configurations": [{"platform": ["linux"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,6.5.5.1-6n]"}}, {"platform": ["linux"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,7.0.1-5169]"}}, {"platform": ["linux"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,7.3.3-7015]"}}, {"platform": ["linux"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,8.2.1-8010]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "SonicOS", "source": "cna", "vendor": "SonicWall"}, "product": "sonicos", "vendor": "sonicwall"}], "created": "2026-08-05T13:30:04.916883+00:00", "title": "Improper HTTP Header Handling Enables Arbitrary Redirection", "updated": "2026-08-05T13:30:05.033668+00:00", "vendors": ["sonicwall", "sonicwall$PRODUCT$sonicos"]}