Secure Connect Gateway CVE-2026-80134

Exploitation requires network-level reachability to the Dell SCG 5.0 management interface (AV:N). The primary limiting factor is AC:H: the attacker must first obtain or derive the hardcoded credentials, which typically requires either binary reverse engineering, a prior insider leak, or waiting for public credential disclosure following CVE publication. No authentication to SCG is required prior to exploitation (PR:N), and no user interaction is involved (UI:N). Exploitation is not limited to a specific operating mode or non-default configuration - the hardcoded credentials exist in all deployments of the affected versions. The meaningful constraint for defenders is network segmentation: if the SCG management interface is not exposed externally or is behind a VPN, the AV:N attack vector is effectively negated.

The CVSS 7.7 score with AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L reflects a meaningful but not trivially exploitable vulnerability; the high attack complexity (AC:H) is the primary score-reducer and indicates that locating the hardcoded credential is a prerequisite step, not a given. Once the credential is publicly known - which commonly happens within days of CVE disclosure - effective complexity drops and real-world risk rises significantly. EPSS data is not provided, but hardcoded credential CVEs historically see rapid exploitation uptake post-publication. There is no CISA KEV listing and no confirmed POC at time of analysis. No signals of active exploitation have been observed, but the exposure window for unpatched SCG instances is real: even a mid-sized municipal IT team in sopot relying on Dell SCG for remote hardware support should treat this as urgent patching work, given the potential for full unauthorized access with no privilege requirement after credential discovery. The A:L impact metric suggests availability degradation is a secondary concern relative to the high confidentiality and integrity risks.

An attacker enumerates publicly documented or reverse-engineered hardcoded credentials associated with Dell SCG 5.0 following CVE publication, then uses those credentials to authenticate directly to the SCG management interface over the network without supplying any valid user account. With access established, the attacker can read sensitive configuration and support data (C:H) or alter gateway settings and connected device configurations (I:H). No public exploit code has been confirmed at time of analysis, but credential discovery is the only barrier once the CVE is disclosed.