What is the CVSS score of CVE-2026-80126?

CVE-2026-80126 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-80126?

Yes, a patch is available for CVE-2026-80126. Update the affected software to the latest version immediately.

Dell Secure Connect Gateway CVE-2026-80126

EUVD-2026-72491 MEDIUM

Improper Locking (CWE-667)

2026-09-07 dell

GHSA-7j6v-w7ff-445m

Information Disclosure Dell Secure Connect Gateway 5 0 Appliance Secure Connect Gateway 5 0 Application

6.5

CVSS 3.1 · Vendor: dell

Severity by source

Vendor (dell) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

5.9 MEDIUM

Race condition (CWE-667) requires timing precision warranting AC:H; 'filesystem access' described implies at minimum C:L despite vendor's C:N.

3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H

4.0 AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (dell).

CVSS VectorVendor: dell

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Patch available

Sep 07, 2026 - 17:17 EUVD

Analysis Generated

Sep 07, 2026 - 17:06 vuln.today

DescriptionCVE.org

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker.

AnalysisAI

Improper locking in Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application allows a low-privileged remote attacker to exploit a synchronization race condition, resulting in unauthorized filesystem access on the affected system. The vendor CVSS vector rates the primary impact as A:H (Availability), yet the description specifically references attacker filesystem access - a tension that suggests possible confidentiality or integrity impact beyond what the official score reflects. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires a valid low-privilege user account on the targeted Dell Secure Connect Gateway instance (confirmed by CVSS PR:L). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The vendor CVSS 3.1 score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) positions this as a medium-severity authenticated availability impact, but the description's reference to 'filesystem access for attacker' introduces ambiguity - confidentiality or integrity consequences may be understated in the official score. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Vendor-released patches are available: upgrade Dell SCG 5.0 Appliance to version 5.36.00.16 or later, and Dell SCG 5.0 Application to version 5.36.00.00 or later, as detailed in Dell advisory DSA-2026-382 (https://www.dell.com/support/kbdoc/en-in/000503426/). … Detailed patch versions, workarounds, and compensating controls in full report.