Description
A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | SonicOS | 6.5.5.2-28n and older versions, 7.0.1-5169 and older versions, 7.3.3-7015 and older versions, 8.2.1-8010 and older versions | — |
Advisories 1
- WID-SEC-2026-2671 SonicWall SonicOS: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Aug 5, 2026
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0009 vendor-advisory