Secure Connect Gateway
Monthly
Server-Side Request Forgery in Dell Secure Connect Gateway (SCG) 5.0 enables unauthenticated remote attackers to cause denial of service against both the Application and Appliance (Virtual Edition) deployment forms. The CVSS vector confirms fully unauthenticated network exploitation with no user interaction, targeting availability exclusively - confidentiality and integrity are unaffected. No public exploit code or active exploitation has been identified; EPSS places this in the 8th percentile, and the CISA SSVC assessment lists exploitation status as none.
Certificate hostname validation failure in Dell Secure Connect Gateway (SCG) 5.0 enables an unauthenticated remote attacker positioned as a network man-in-the-middle to present a valid TLS certificate for a different host, defeating the connection's trust model and gaining unauthorized access to intercepted communications. Both the Appliance variant (prior to 5.36.00.16) and Application variant (prior to 5.36.00.00) are confirmed affected per Dell DSA-2026-382. No public exploit or CISA KEV listing has been identified at time of analysis; the AC:H CVSS metric reflects the non-trivial network positioning prerequisite.
Local privilege escalation to root in Dell Secure Connect Gateway (SCG) 5.0 lets a low-privileged operator with SSH access to the appliance host obtain full root control without a password by abusing the exposed Docker socket (CWE-250, Execution with Unnecessary Privileges). Affected builds are the SCG Appliance prior to 5.36.00.16 and the SCG Application prior to 5.36.00.00. The same socket exposure also enables container escape: an attacker who compromises any service inside the orchestrator container can break out to host-level control. No public exploit is identified at time of analysis and it is not listed in CISA KEV, but the technique (writable/accessible Docker socket) is a well-known and reliable escalation path.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 allows a local low-privileged attacker to inject and execute scripts, resulting in high confidentiality impact. Affected are SCG 5.0 Appliance versions prior to 5.36.00.16 and SCG 5.0 Application versions prior to 5.36.00.00. No public exploit code has been identified at time of analysis, and there is no CISA KEV listing.
Sensitive information insertion into log files in Dell Secure Connect Gateway (SCG) 5.0 exposes confidential data to local low-privileged users. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are affected, with the vulnerability covered under Dell advisory DSA-2026-382 alongside additional CVEs. No public exploit code or active exploitation has been identified, and the low CVSS score of 3.3 accurately reflects the constrained local access requirement and limited confidentiality impact.
Race condition in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to cause denial of service by exploiting improper synchronization of shared resources. Both the Appliance and Application deployment forms are affected across versions prior to 5.36.00.16 and 5.36.00.00 respectively, as confirmed by Dell advisory DSA-2026-382. No public exploit code has been identified at time of analysis.
Dell Secure Connect Gateway (SCG) 5.0 is affected by a network-exploitable TOCTOU race condition (CWE-367) that an unauthenticated remote attacker can leverage to cause denial of service. The appliance and application variants are both affected, with fixed versions at 5.36.00.16 and 5.36.00.00 respectively per Dell advisory DSA-2026-382. Notably, the vendor's CVSS vector includes low confidentiality and integrity impact metrics (C:L/I:L/A:L) beyond what the published description's DoS-only framing suggests, implying possible additional undisclosed effects from successful race exploitation.
Sensitive information insertion into log files in Dell Secure Connect Gateway (SCG) 5.0 exposes confidential data to local low-privileged users. Both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00) are affected. A local attacker with standard OS-level access can read log files containing sensitive data, potentially including credentials or configuration secrets. No active exploitation or public proof-of-concept has been identified at time of analysis.
External control of critical state data in Dell Secure Connect Gateway (SCG) 5.0 exposes sensitive information to remote unauthenticated attackers via network-accessible state manipulation. Affected are SCG 5.0 Appliance versions prior to 5.36.00.16 and SCG 5.0 Application versions prior to 5.36.00.00. Impact is limited to partial confidentiality loss (C:L) with no integrity or availability degradation, per CVSS; no public exploit code has been identified and this vulnerability is not listed in CISA KEV.
Race condition in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to trigger denial of service against both the Appliance and Application deployment variants by exploiting improper synchronization of shared resources under concurrent access (CWE-567). Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00, with fixes detailed in Dell advisory DSA-2026-382. Notably, the vendor-supplied CVSS 3.1 vector records C:L/A:N, which conflicts with the stated denial-of-service impact - a likely metadata error, as availability impact is the primary concern here. No public exploit code or active exploitation has been confirmed at time of analysis.
Script injection in Dell Secure Connect Gateway (SCG) 5.0 exposes organizations running either the Appliance (prior to 5.36.00.16) or Application (prior to 5.36.00.00) builds to unauthenticated remote exploitation via alternate XSS syntax. An attacker can bypass the product's XSS neutralization controls using non-standard or alternate encoding forms, resulting in script injection with limited confidentiality impact per the CVSS C:L assessment. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Hardcoded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 allows a remote low-privileged attacker to bypass cryptographic protection mechanisms, resulting in high confidentiality impact. Both the Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) deployment modes are affected. Dell has released corrective updates via advisory DSA-2026-382, and no public exploit or active exploitation has been identified at time of analysis.
SQL injection in Dell Secure Connect Gateway (SCG) 5.0 allows a remote low-privileged attacker to extract sensitive data and potentially inject scripts into the application. Affecting both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00), the flaw requires only valid low-privilege credentials and standard network access with no user interaction. Dell has released patched versions and no public exploit code has been identified at time of analysis.
Sensitive data written to log files in Dell Secure Connect Gateway (SCG) 5.0 is readable by low-privileged local users, resulting in high-confidence confidentiality exposure. Affected products are SCG 5.0 Appliance versions prior to 5.36.00.16 and SCG 5.0 Application versions prior to 5.36.00.00, with a vendor-released patch available under advisory DSA-2026-382. No public exploit code exists and no active exploitation has been identified at time of analysis.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30, contain(s) an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. [CVSS 6.4 MEDIUM]
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, Enables Live-Restore setting which enhances security by keeping containers running during daemon restarts, reducing attack. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, contain(s) an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable. No vendor patch available.
The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL. Rated low severity (CVSS 2.3), this vulnerability is low attack complexity. No vendor patch available.
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for internal email and collection settings REST APIs (if enabled by Admin user from UI). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal maintenance REST API (if enabled by Admin user from UI). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal enable REST API (if enabled by Admin user from UI). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell Secure Connect Gateway, 5.18, contains an Inadequate Encryption Strength Vulnerability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell Secure Connect Gateway (SCG) version 5.14.00.12 contains a broken cryptographic algorithm vulnerability. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Dell EMC SCG 5.00.00.10 and earlier, contain a sensitive information disclosure vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
Server-Side Request Forgery in Dell Secure Connect Gateway (SCG) 5.0 enables unauthenticated remote attackers to cause denial of service against both the Application and Appliance (Virtual Edition) deployment forms. The CVSS vector confirms fully unauthenticated network exploitation with no user interaction, targeting availability exclusively - confidentiality and integrity are unaffected. No public exploit code or active exploitation has been identified; EPSS places this in the 8th percentile, and the CISA SSVC assessment lists exploitation status as none.
Certificate hostname validation failure in Dell Secure Connect Gateway (SCG) 5.0 enables an unauthenticated remote attacker positioned as a network man-in-the-middle to present a valid TLS certificate for a different host, defeating the connection's trust model and gaining unauthorized access to intercepted communications. Both the Appliance variant (prior to 5.36.00.16) and Application variant (prior to 5.36.00.00) are confirmed affected per Dell DSA-2026-382. No public exploit or CISA KEV listing has been identified at time of analysis; the AC:H CVSS metric reflects the non-trivial network positioning prerequisite.
Local privilege escalation to root in Dell Secure Connect Gateway (SCG) 5.0 lets a low-privileged operator with SSH access to the appliance host obtain full root control without a password by abusing the exposed Docker socket (CWE-250, Execution with Unnecessary Privileges). Affected builds are the SCG Appliance prior to 5.36.00.16 and the SCG Application prior to 5.36.00.00. The same socket exposure also enables container escape: an attacker who compromises any service inside the orchestrator container can break out to host-level control. No public exploit is identified at time of analysis and it is not listed in CISA KEV, but the technique (writable/accessible Docker socket) is a well-known and reliable escalation path.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 allows a local low-privileged attacker to inject and execute scripts, resulting in high confidentiality impact. Affected are SCG 5.0 Appliance versions prior to 5.36.00.16 and SCG 5.0 Application versions prior to 5.36.00.00. No public exploit code has been identified at time of analysis, and there is no CISA KEV listing.
Sensitive information insertion into log files in Dell Secure Connect Gateway (SCG) 5.0 exposes confidential data to local low-privileged users. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are affected, with the vulnerability covered under Dell advisory DSA-2026-382 alongside additional CVEs. No public exploit code or active exploitation has been identified, and the low CVSS score of 3.3 accurately reflects the constrained local access requirement and limited confidentiality impact.
Race condition in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to cause denial of service by exploiting improper synchronization of shared resources. Both the Appliance and Application deployment forms are affected across versions prior to 5.36.00.16 and 5.36.00.00 respectively, as confirmed by Dell advisory DSA-2026-382. No public exploit code has been identified at time of analysis.
Dell Secure Connect Gateway (SCG) 5.0 is affected by a network-exploitable TOCTOU race condition (CWE-367) that an unauthenticated remote attacker can leverage to cause denial of service. The appliance and application variants are both affected, with fixed versions at 5.36.00.16 and 5.36.00.00 respectively per Dell advisory DSA-2026-382. Notably, the vendor's CVSS vector includes low confidentiality and integrity impact metrics (C:L/I:L/A:L) beyond what the published description's DoS-only framing suggests, implying possible additional undisclosed effects from successful race exploitation.
Sensitive information insertion into log files in Dell Secure Connect Gateway (SCG) 5.0 exposes confidential data to local low-privileged users. Both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00) are affected. A local attacker with standard OS-level access can read log files containing sensitive data, potentially including credentials or configuration secrets. No active exploitation or public proof-of-concept has been identified at time of analysis.
External control of critical state data in Dell Secure Connect Gateway (SCG) 5.0 exposes sensitive information to remote unauthenticated attackers via network-accessible state manipulation. Affected are SCG 5.0 Appliance versions prior to 5.36.00.16 and SCG 5.0 Application versions prior to 5.36.00.00. Impact is limited to partial confidentiality loss (C:L) with no integrity or availability degradation, per CVSS; no public exploit code has been identified and this vulnerability is not listed in CISA KEV.
Race condition in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to trigger denial of service against both the Appliance and Application deployment variants by exploiting improper synchronization of shared resources under concurrent access (CWE-567). Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00, with fixes detailed in Dell advisory DSA-2026-382. Notably, the vendor-supplied CVSS 3.1 vector records C:L/A:N, which conflicts with the stated denial-of-service impact - a likely metadata error, as availability impact is the primary concern here. No public exploit code or active exploitation has been confirmed at time of analysis.
Script injection in Dell Secure Connect Gateway (SCG) 5.0 exposes organizations running either the Appliance (prior to 5.36.00.16) or Application (prior to 5.36.00.00) builds to unauthenticated remote exploitation via alternate XSS syntax. An attacker can bypass the product's XSS neutralization controls using non-standard or alternate encoding forms, resulting in script injection with limited confidentiality impact per the CVSS C:L assessment. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Hardcoded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 allows a remote low-privileged attacker to bypass cryptographic protection mechanisms, resulting in high confidentiality impact. Both the Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) deployment modes are affected. Dell has released corrective updates via advisory DSA-2026-382, and no public exploit or active exploitation has been identified at time of analysis.
SQL injection in Dell Secure Connect Gateway (SCG) 5.0 allows a remote low-privileged attacker to extract sensitive data and potentially inject scripts into the application. Affecting both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00), the flaw requires only valid low-privilege credentials and standard network access with no user interaction. Dell has released patched versions and no public exploit code has been identified at time of analysis.
Sensitive data written to log files in Dell Secure Connect Gateway (SCG) 5.0 is readable by low-privileged local users, resulting in high-confidence confidentiality exposure. Affected products are SCG 5.0 Appliance versions prior to 5.36.00.16 and SCG 5.0 Application versions prior to 5.36.00.00, with a vendor-released patch available under advisory DSA-2026-382. No public exploit code exists and no active exploitation has been identified at time of analysis.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30, contain(s) an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. [CVSS 6.4 MEDIUM]
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, Enables Live-Restore setting which enhances security by keeping containers running during daemon restarts, reducing attack. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, contain(s) an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable. No vendor patch available.
The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL. Rated low severity (CVSS 2.3), this vulnerability is low attack complexity. No vendor patch available.
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for internal email and collection settings REST APIs (if enabled by Admin user from UI). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal maintenance REST API (if enabled by Admin user from UI). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal enable REST API (if enabled by Admin user from UI). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell Secure Connect Gateway, 5.18, contains an Inadequate Encryption Strength Vulnerability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Dell Secure Connect Gateway (SCG) version 5.14.00.12 contains a broken cryptographic algorithm vulnerability. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Dell EMC SCG 5.00.00.10 and earlier, contain a sensitive information disclosure vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.