Secure Connect Gateway CVE-2026-80055

The CVE description states that exploitation requires only remote network access with no authentication ('unauthenticated attacker with remote access'), but this directly contradicts the CVSS vector's PR:H metric. The conflicting signals mean the true authentication prerequisite is unconfirmed. Attack complexity is rated High (AC:H), meaning a specific, non-default condition or precise payload construction is required - this limits opportunistic exploitation even if the endpoint is unauthenticated. The vulnerability is limited to Dell SCG 5.0 Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) deployments. Impact is scoped to confidentiality (C:H) with no integrity or availability dimensions; exploitation yields LDAP data disclosure or script injection output, not remote code execution in the traditional sense. Defenders should treat the interface as potentially unauthenticated until Dell clarifies the discrepancy.

The risk picture for this CVE is significantly muddied by a direct contradiction between the description and the CVSS vector. The description explicitly states 'unauthenticated attacker with remote access,' which aligns with PR:N - but the provided CVSS vector specifies PR:H (high privileges required), yielding a base score of only 4.4. If the description is accurate (unauthenticated), the true score would be substantially higher, roughly 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Security teams should not treat the 4.4 score as reliable until Dell confirms which characterization is correct. No public exploit code has been identified, EPSS data is absent from the provided intelligence, and this CVE is not listed in the CISA KEV catalog, reducing urgency for unpatched systems. The attack complexity is rated High (AC:H), meaning even if unauthenticated exploitation is possible, it is not trivially automatable. The sole confirmed impact is confidentiality - directory data or script injection output - with no integrity or availability dimension in the provided vector.

An attacker with network access to the Dell SCG 5.0 management interface crafts an HTTP request containing maliciously structured LDAP metacharacters (e.g., parentheses, wildcards, or null bytes) in an input field that is passed unsanitized into an LDAP query. If the interface is unauthenticated as described, no credential is required; otherwise, the attacker first authenticates with elevated credentials before submitting the payload. The injected LDAP query manipulates directory logic, potentially exposing sensitive directory entries or injecting script content that is processed by the server.