Search threats, CVEs… ⌘K
Back to vendor advisories
SonicWall PSIRT AdvisoriesSNWLID-2026-0009

SonicOS Improper Neutralization of HTTP Headers Vulnerability

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.

Read the vendor bulletin Get alerts for Affected Platforms: Affected Versions
4.3CVSS out of 10Medium severity
Scope

What the vendor says is affected

  • Affected Platforms: Affected Versions
  • Gen6 Hardware Firewalls -SOHOW, SOHO 250, SOHO 250W, TZ 300, TZ 300P, TZ 300W, TZ 350, TZ 350W, TZ 400, TZ 400W, TZ 500, TZ 500W, TZ 600, TZ 600P, NSa 2650, NSa 3600, NSa 3650, NSa 4600, NSa 4650, NSa 5600, NSa 5650, NSa 6600, NSa 6650, SM 9200, SM 9250, SM 9400, SM 9450, SM 9600, SM 9650: 6.5.5.2-28n and older versions
  • Gen6 NSv - NSv 10, NSv 25, NSv 50, NSv 100, NSv 200, NSv 300, NSv 400, NSv 800, NSv 1600: 6.5.4.4-44v-21-2472 and older versions
  • Gen7 Hardware Firewalls - TZ 270, TZ 270W, TZ 370, TZ 370W, TZ 470, TZ 470W, TZ 570, TZ 570W, TZ 570P, TZ 670, NSa 2700, NSa 3700, NSa 4700, NSa 5700, NSa 6700, NSsp 10700, NSsp 11700, NSsp 13700, NSsp 15700 Gen7 NSv - NSv 270, NSv 470, NSv 870 (ESX, KVM, HYPER-V, AWS, Azure): 7.0.1-5169 and older versions 7.3.3-7015 and older versions
  • Gen8 Hardware Firewalls - TZ 80, TZ 280, TZ 280W, TZ 380, TZ 380W, TZ 480, TZ 580, TZ 680, NSa 2800, NSa 3800, NSa 4800, NSa 5800: 8.2.1-8010 and older versions

Versions the vendor lists as fixed

  • Fixed Platforms: Fixed Versions
  • Gen6 Hardware Firewalls - SOHO 250, SOHO 250W, TZ 350, TZ 350W, TZ 500, TZ 500W, NSa 4600, NSa 4650, NSa 5600, NSa 5650, NSa 6600, NSa 6650: Please use the provided workaround
  • Gen7 Hardware Firewalls - TZ 270, TZ 270W, TZ 370, TZ 370W, TZ 470, TZ 470W, TZ 570, TZ 570W, TZ 570P, TZ 670, NSa 2700, NSa 3700, NSa 4700, NSa 5700, NSa 6700, NSsp 10700, NSsp 11700, NSsp 13700, NSsp 15700 Gen7 NSv - NSv 270, NSv 470, NSv 870 (ESX, KVM, HYPER-V, AWS, Azure): Please use the provided workaround (Fix for GEN7 planned in next release)
  • Gen8 Hardware Firewalls - TZ 80, TZ 280, TZ 280W, TZ 380, TZ 380W, TZ 480, TZ 580, TZ 680, NSa 2800, NSa 3800, NSa 4800, NSa 5800 Gen8 NSv - NSv XS, NSv S, NSv M, NSv L (ESX, KVM, HYPER-V, AWS, Azure): 8.2.2-8015 and higher versions
Next step

What the vendor recommends

Install the applicable fixed SonicWall release for your product and branch. Fixed Platforms: Fixed Versions Gen6 Hardware Firewalls - SOHO 250, SOHO 250W, TZ 350, TZ 350W, TZ 500, TZ 500W, NSa 4600, NSa 4650, NSa 5600, NSa 5650, NSa 6600, NSa 6650: Please use the provided workaround Gen7 Hardware Firewalls - TZ 270, TZ 270W, TZ 370, TZ 370W, TZ 470, TZ 470W, TZ 570, TZ 570W, TZ 570P, TZ 670, NSa 2700, NSa 3700, NSa 4700, NSa 5700, NSa 6700, NSsp 10700, NSsp 11700, NSsp 13700, NSsp 15700 Gen7 NSv - NSv 270, NSv 470, NSv 870 (ESX, KVM, HYPER-V, AWS, Azure): Please use the provided workaround (Fix for GEN7 planned in next release) Gen8 Hardware Firewalls - TZ 80, TZ 280, TZ 280W, TZ 380, TZ 380W, TZ 480, TZ 580, TZ 680, NSa 2800, NSa 3800, NSa 4800, NSa 5800 Gen8 NSv - NSv XS, NSv S, NSv M, NSv L (ESX, KVM, HYPER-V, AWS, Azure): 8.2.2-8015 and higher versions

Review the complete instructions on the vendor's site
Timeline

When this advisory changed

  1. Published by SonicWall

    The publication date reported by the vendor.

  2. Updated by SonicWall

    The vendor changed the advisory after it was first published.

  3. Added to SecurityAlert

    We collected the advisory from the official source.

Vulnerabilities

CVEs named in this advisory

CVE-2026-0516View CVSS, KEV, EPSS, and threat context
Keep investigating
See every advisory from this vendor