CVE-2026-80164

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

CVSS v3 7.4 HIGH

7.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:dell:secure_connect_gateway:::::application:::*
	cpe:2.3:a:dell:secure_connect_gateway:::::virtual:::*

History

No history.

Information

Published : 2026-09-07 14:16

Updated : 2026-09-09 18:15

NVD link : CVE-2026-80164

Mitre link : CVE-2026-80164

CVE.ORG link : CVE-2026-80164

JSON object : View

Products Affected

dell

secure_connect_gateway

CWE

CWE-295

Improper Certificate Validation

{"id": "CVE-2026-80164", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-80164", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-09-08T16:41:09.337481Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security_alert@emc.com", "affectedData": [{"vendor": "Dell", "product": "Secure Connect Gateway 5.0 - Application", "versions": [{"status": "affected", "version": "0", "lessThan": "5.36.00.00 or later", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Secure Connect Gateway 5.0 - Appliance", "versions": [{"status": "affected", "version": "0", "lessThan": "5.36.00.16 or later", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-09-07T14:16:55.060", "references": [{"url": "https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-295"}]}], "descriptions": [{"lang": "en", "value": "Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access."}], "lastModified": "2026-09-09T18:15:02.723", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*", "vulnerable": true, "matchCriteriaId": "7978D545-2FDA-4B19-B0A5-F87E87EE8A59", "versionEndExcluding": "5.36.00.00"}, {"criteria": "cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*", "vulnerable": true, "matchCriteriaId": "D6766A93-993A-40A7-9766-F830A1AE4C80", "versionEndExcluding": "5.36.00.16"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}