CVE-2026-0516: SonicWall SonicOS

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.

Affected products

• SonicWall SonicOS: up to and including 6.5.5.2-28n; up to and including 7.0.1-5169; up to and including 7.3.3-7015; up to and including 8.2.1-8010

Published 2026-08-05. Last modified 2026-08-28.