CRITICAL 9.8 NVD

CVE-2026-80172

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Aut

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This vulnerability is considered critical as an unauthenticated attacker can repeatedly reuse a captured request to generate ADMIN access and refresh tokens. Since there is no nonce validation or time limit on requests, the attack can be performed indefinitely. Dell recommends customers to upgrade at the earliest opportunity

Affected Products

References

Published: 2026-09-09 · Source: NVD · Feed updated: 2026-09-11
This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-09-09 via NVD. Affected: dell/secure_connect_gateway.

Risk Timeline

CVE Disclosed2026-09-09 · 1 day ago

Remediation Resources

Official Advisory
www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-updat

Related Vulnerabilities

CVETitleSeverityCVSS
CVE-2026-61410Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 ApplicationCRITICAL9.4
CVE-2026-80238Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 ApplicationCRITICAL9.3
CVE-2026-79645Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 ApplicationHIGH8.2
CVE-2026-78491Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 ApplicationHIGH8.2
CVE-2026-80132ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application HIGH8.1
CVE-2026-80134Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 ApplicationHIGH7.7
vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.