Skip to main content

Secure Connect Gateway CVE-2026-80123

| EUVDEUVD-2026-74764 HIGH
Server-Side Request Forgery (SSRF) (CWE-918)
2026-09-09 security_alert@emc.com GHSA-7rc5-fh65-vpm3
Denial Of Service SSRF Dell Secure Connect Gateway
7.5
CVSS 3.1 · NVD
Share

Severity by source

Vendor (emc) PRIMARY
HIGH
qualitative
NVD
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
7.5 HIGH

Network-reachable, no auth required, no interaction needed; impact is strictly availability via DoS, no confidentiality or integrity effect.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (emc).

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

6
Analysis Updated
Sep 09, 2026 - 20:30 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Sep 09, 2026 - 20:22 vuln.today
cvss_changed
CVSS changed
Sep 09, 2026 - 20:22 NVD
7.3 (HIGH) 7.5 (HIGH)
Patch available
Sep 09, 2026 - 09:18 EUVD
Analysis Generated
Sep 09, 2026 - 08:31 vuln.today
CVE Published
Sep 09, 2026 - 08:17 cve.org
HIGH 7.3

DescriptionNVD

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

AnalysisAI

Server-Side Request Forgery in Dell Secure Connect Gateway (SCG) 5.0 enables unauthenticated remote attackers to cause denial of service against both the Application and Appliance (Virtual Edition) deployment forms. The CVSS vector confirms fully unauthenticated network exploitation with no user interaction, targeting availability exclusively - confidentiality and integrity are unaffected. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No authentication is required - the vulnerable endpoint is exposed to unauthenticated remote attackers, as confirmed by PR:N and UI:N in the CVSS vector. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Raw CVSS of 7.5 (High) is driven by full network accessibility, no authentication, and high availability impact - a configuration that makes this look urgent on paper. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Vendor-released patch: SCG Application 5.36.00.00 and SCG Appliance (Virtual Edition) 5.36.00.16, per Dell Security Advisory DSA-2026-382 (https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, identify all instances of Dell Secure Connect Gateway 5.0 in your environment (both Application and Virtual Edition deployments) and obtain the vendor patch from Dell's advisory. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Secure Connect Gateway

View all
CVE-2026-80238 CRITICAL
9.3 Sep 07

Local privilege escalation to root in Dell Secure Connect Gateway (SCG) 5.0 lets a low-privileged operator with SSH acce
CVE-2024-48016 HIGH
8.8 Oct 18

Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographi
CVE-2024-29168 HIGH
8.8 Jun 13

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST

CVE-2024-22457 HIGH
8.8 Mar 01

Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. Ra
CVE-2024-47241 HIGH
8.1 Oct 18

Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vuln
CVE-2024-29169 HIGH
8.1 Jun 13

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST A
CVE-2026-79636 HIGH
7.0 Sep 09

Certificate hostname validation failure in Dell Secure Connect Gateway (SCG) 5.0 enables an unauthenticated remote attac
CVE-2026-80177 MEDIUM
6.5 Sep 09

SQL injection in Dell Secure Connect Gateway (SCG) 5.0 allows a remote low-privileged attacker to extract sensitive data
CVE-2026-78481 MEDIUM
6.5 Sep 09

Hardcoded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 allows a remote low-privileged attacker to
CVE-2023-28043 MEDIUM
6.5 Jun 01

Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. Rated medium severity
CVE-2025-46696 MEDIUM
6.4 Jan 06

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30, contain(s) an Executi
CVE-2024-47240 MEDIUM
6.3 Oct 18

Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. Rated medium severity (C

Same weakness CWE-918 – Server-Side Request Forgery (SSRF)

View all
CVE-2021-34473 CRITICAL POC
9.1
CVE-2021-26855 CRITICAL POC
9.1
CVE-2021-21985 CRITICAL POC
9.8
CVE-2022-41040 HIGH POC
8.8
CVE-2024-21893 HIGH POC
8.2
CVE-2021-40438 CRITICAL POC
9.0
CVE-2021-21975 HIGH POC
7.5
CVE-2023-48022 CRITICAL POC
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2026-80123 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy