Secure Connect Gateway 5 0 Application
Monthly
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 enables a locally authenticated low-privilege attacker to execute arbitrary operating system commands, resulting in full confidentiality, integrity, and availability compromise of the affected system. Both the Appliance deployment form (virtual/hardware) and the Application package are affected, with fix versions 5.36.00.16 and 5.36.00.00 respectively confirmed by Dell advisory DSA-2026-382. No public exploit code and no CISA KEV active-exploitation listing are identified at time of analysis.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) variants - enables a locally authenticated low-privileged attacker to execute arbitrary operating system commands, yielding full compromise of confidentiality, integrity, and availability of the affected host. Dell confirmed the issue in advisory DSA-2026-382 and released patches for both deployment forms. No public exploit code or active exploitation has been identified at time of analysis; SSVC rates exploitation as none and the attack as non-automatable.
Remote code execution in Dell Secure Connect Gateway (SCG) 5.0 Virtual Edition allows an unauthenticated network attacker to inject arbitrary operating-system commands via improperly neutralized special elements (CWE-78). Affected are the SCG 5.0 Appliance component before 5.36.00.16 and the SCG 5.0 Application component before 5.36.00.00; a vendor patch is available via Dell advisory DSA-2026-382. No public exploit identified at time of analysis, but the network-reachable, no-authentication attack path and 9.8 CVSS make this a high-priority remote-takeover risk.
Command injection in Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance (before 5.36.00.16) and Application (before 5.36.00.00) variants - allows an unauthenticated remote attacker to inject and execute commands, described by Dell as script injection. The CVSS 9.8 vector rates all three impacts as high (C:H/I:H/A:H), though CISA SSVC scores the technical impact as only partial. No public exploit identified at time of analysis and SSVC exploitation status is 'none', but the flaw is marked automatable, raising the risk of scanning-driven mass exploitation once a technique surfaces.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance and Application deployment forms - enables a locally authenticated low-privileged user to inject and execute arbitrary operating system commands. Affected are Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, with full confidentiality, integrity, and availability impact on the underlying host. No public exploit code has been identified at time of analysis, and CISA SSVC rates exploitation as currently none with non-automatable attack delivery.
Hard-coded credentials in Dell Secure Connect Gateway (SCG) 5.0 expose both the Appliance and Application deployments to unauthenticated remote information disclosure. Any attacker who discovers or reverse-engineers the embedded static credentials - which cannot be changed by administrators - can authenticate to the gateway without valid user accounts and access sensitive information. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no privileges or user interaction; no public exploit or CISA KEV listing is recorded at time of analysis.
Hard-coded credentials embedded in Dell Secure Connect Gateway 5.0 allow a remote, unauthenticated attacker to authenticate to the service using the static credentials and access sensitive information. Both the Appliance variant (all versions prior to 5.36.00.16) and the Application variant (all versions prior to 5.36.00.00) are affected, as confirmed by Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified, but CWE-798 credentials are static across all unpatched installations worldwide, meaning any party with knowledge of them can exploit any exposed instance without further effort.
Hard-coded credentials in Dell Secure Connect Gateway (SCG) 5.0 expose sensitive information to unauthenticated remote attackers across both the Appliance and Application deployment variants. The vulnerability (CWE-798) allows an attacker who discovers or possesses the embedded credentials to authenticate without authorization and access confidential data. Dell has released patched versions under advisory DSA-2026-382, and no public exploits or CISA KEV listing have been identified at time of analysis.
SQL injection in Dell Secure Connect Gateway (SCG) 5.0 allows a remote high-privileged attacker to execute arbitrary SQL commands against the backend database, resulting in unauthorized access to sensitive data and potential data manipulation. Both the Appliance edition (before 5.36.00.16) and the Application edition (before 5.36.00.00) are affected. No public exploit code has been identified at time of analysis, and the mandatory high-privilege requirement substantially limits the realistic attack surface.
Unauthorized ADMIN access in Dell Secure Connect Gateway (SCG) 5.0 allows a remote unauthenticated attacker to replay a previously captured request indefinitely, forging ADMIN-level access and refresh tokens. Because the token-issuing flow performs no nonce validation and enforces no request expiry, a single intercepted request grants durable administrative control of the gateway. The Appliance edition is affected before 5.36.00.16 and the Application edition before 5.36.00.00; no public exploit identified at time of analysis, and it is not listed in CISA KEV.
External control of file name or path (CWE-73) in Dell Secure Connect Gateway (SCG) 5.0 enables unauthenticated remote attackers to influence filesystem path resolution, resulting in unauthorized filesystem access. Both the Appliance form factor (versions before 5.36.00.16) and the Application form factor (versions before 5.36.00.00) are affected. Dell has released patched versions and published advisory DSA-2026-382; no public exploit code or active exploitation has been identified at this time.
Missing brute-force rate-limiting in Dell Secure Connect Gateway (SCG) 5.0 Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) exposes authentication endpoints to unlimited credential-guessing by unauthenticated remote attackers over the network. Successful exploitation allows an attacker to enumerate and compromise valid credentials, with Dell indicating the resulting access can enable client-side request forgery. No public exploit code or CISA KEV listing has been identified at time of analysis.
Denial-of-service via compression bomb in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to exhaust server resources by sending highly compressed payloads that expand dramatically upon decompression. Both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00) are affected. No public exploit code has been identified at time of analysis, and active exploitation has not been confirmed by CISA KEV.
Path traversal in Dell Secure Connect Gateway (SCG) 5.0 exposes restricted filesystem paths to unauthenticated remote attackers across both Appliance and Application deployment variants. The vulnerability (CWE-22) allows directory escape via crafted request paths, resulting in unauthorized access to files outside the intended serving root. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; however, the unauthenticated network-accessible attack surface and low complexity make this a credible priority for enterprise Dell infrastructure operators.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application allows a network-positioned unauthenticated attacker to conduct man-in-the-middle attacks, intercepting and potentially modifying encrypted communications between the SCG and Dell's remote support infrastructure. Affected versions are SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00, as confirmed by Dell advisory DSA-2026-382. No public exploit code or CISA KEV listing exists at time of analysis, but successful exploitation yields high confidentiality and integrity impact on all intercepted support traffic.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows an unauthenticated network-positioned attacker to conduct man-in-the-middle attacks against both the Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) deployment forms, intercepting and potentially tampering with encrypted remote-support communications to achieve unauthorized access. Dell confirmed the vulnerability under advisory DSA-2026-382 with a CVSS 7.7 (High) rating; the AC:H metric reflects the MITM positioning prerequisite, which is the primary exploitation barrier. No public exploit code has been identified at time of analysis.
Remote code execution via a download-without-integrity-check flaw affects Dell Secure Connect Gateway (SCG) 5.0 in both its Appliance and Application deployment forms. An unauthenticated network-adjacent attacker who can achieve a man-in-the-middle position between the SCG system and Dell's update infrastructure can substitute malicious code for legitimate downloads, leading to command execution on the appliance. The CVSS vector (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H) captures the high attack complexity from the MITM requirement alongside the absence of authentication prerequisites. No public exploit has been identified at time of analysis.
Server-Side Request Forgery (SSRF) in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to coerce the appliance or application into issuing arbitrary HTTP/HTTPS requests to internal or external destinations, leading to unauthorized access to internal network services, cloud metadata endpoints, or other back-end resources not intended for external exposure. Both the Appliance and Application deployment modes are affected across all versions prior to the fixed releases. No public exploit code or active exploitation has been identified at time of analysis, but the low-complexity, unauthenticated network vector makes this straightforwardly exploitable against any internet- or intranet-accessible instance.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 enables a low-privileged authenticated remote attacker to inject arbitrary OS commands and escalate to full system control, achieving complete confidentiality, integrity, and availability compromise. Both the SCG 5.0 Appliance (fixed in 5.36.00.16) and SCG 5.0 Application (fixed in 5.36.00.00) variants are affected. No public exploit identified at time of analysis, and the high attack complexity (AC:H) suggests a specific condition or non-trivial technique is required beyond simple credential possession.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows remote unauthenticated attackers to exploit TLS/certificate handling weaknesses, leading to unauthorized access and high-availability impact. Both the Appliance (Virtual Edition) builds prior to 5.36.00.16 and Application builds prior to 5.36.00.00 are affected. No public exploit code or CISA KEV listing has been identified at time of analysis, but the unauthenticated network vector and CVSS 8.2 score make this a priority patching item for environments running Dell infrastructure monitoring.
Improper certificate validation in Dell Secure Connect Gateway 5.0 exposes both Appliance and Application deployments to unauthenticated remote exploitation, enabling MITM-style attacks that bypass TLS trust enforcement and grant unauthorized access to communications relayed through the gateway. The Appliance variant is affected below version 5.36.00.16 and the Application variant below 5.36.00.00. No active exploitation has been confirmed by CISA KEV and no public exploit code is referenced, but the zero-authentication network vector makes patching urgent for any internet-reachable SCG deployment.
Improper certificate validation in Dell Secure Connect Gateway 5.0 (both Appliance and Application variants) enables an unauthenticated remote attacker with a man-in-the-middle network position to intercept and modify encrypted communications between the SCG platform and Dell's support infrastructure. Rated CVSS 7.4 (CWE-295) with high confidentiality and integrity impact, this flaw is particularly sensitive given that SCG routinely carries privileged support telemetry and credentials. No public exploit code and no CISA KEV listing have been identified at time of analysis; Dell has released patches in advisory DSA-2026-382.
Privilege escalation in Dell Secure Connect Gateway (SCG) 5.0 allows a local attacker with basic system access to gain full administrative control of the affected host. The root cause is improper privilege management (CWE-269) in both the SCG 5.0 Application (prior to 5.36.00.00) and SCG 5.0 Appliance (prior to 5.36.00.16), as confirmed by Dell advisory DSA-2026-382. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA KEV catalog.
Improper Certificate Validation (CWE-295) in Dell Secure Connect Gateway (SCG) 5.0 allows an unauthenticated attacker positioned on the same network segment to intercept or manipulate TLS-protected communications, leading to unauthorized access to sensitive data or remote-support sessions. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are affected. The CVSS AV:A vector confirms this is not a direct internet exploit - the attacker must be adjacent to the network segment hosting the SCG deployment. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 allows a high-privileged remote attacker to inject arbitrary OS commands through the application's management interface, achieving privilege escalation beyond the application boundary to OS-level access. Both the SCG 5.0 Appliance (prior to 5.36.00.16) and SCG 5.0 Application (prior to 5.36.00.00) are affected, confirmed by Dell advisory DSA-2026-382. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; Dell has released patched versions for both product variants.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 exposes both Appliance and Application variants to protection mechanism bypass by unauthenticated remote attackers. The flaw (CWE-295) allows an adversary in a network-interception position to present an invalid or attacker-controlled TLS certificate that the SCG accepts without proper verification, potentially enabling interception or manipulation of communications between the gateway and backend or managed systems. Patch availability is confirmed via Dell advisory DSA-2026-382; no public exploit or CISA KEV listing is present at time of analysis.
Unauthorized remote access to Dell Secure Connect Gateway (SCG) 5.0 is possible through a logic flaw rooted in CWE-480 (Use of Incorrect Operator), affecting both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00). The incorrect operator in a security-relevant conditional-likely an authentication or authorization check-produces a logic outcome that permits access without valid credentials, consistent with the CVSS PR:N vector and the 'Authentication Bypass' classification. Real-world impact spans limited confidentiality, integrity, and availability loss per the CVSS L/L/L impact ratings; no public exploit code or CISA KEV entry has been identified at time of analysis.
Improper TLS certificate validation in Dell Secure Connect Gateway 5.0 allows an unauthenticated remote attacker occupying a man-in-the-middle network position to intercept and tamper with encrypted SCG communications, leading to unauthorized access. Both the physical Appliance variant (fixed in 5.36.00.16) and the virtual Application variant (fixed in 5.36.00.00) are affected across all 5.0.x releases preceding those thresholds, per Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified at time of analysis.
Missing authentication on critical API functions in Dell Secure Connect Gateway (SCG) 5.0 exposes privileged operations to remote unauthenticated attackers, enabling unauthorized access that yields high integrity impact and limited confidentiality exposure. Both deployment forms - the virtual Appliance (prior to 5.36.00.16) and the Application (prior to 5.36.00.00) - are affected. Dell has released patches via advisory DSA-2026-382; no public exploit or CISA KEV listing exists at time of analysis, but the attack path (AV:N/AC:L/PR:N/UI:N) requires minimal attacker capability.
Unauthenticated remote exploitation of Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance variant (prior to 5.36.00.16) and Application variant (prior to 5.36.00.00) - exposes a critical function with no authentication gate, allowing a network-adjacent or internet-facing attacker to trigger high-availability-impact operations without any credentials. Dell's advisory DSA-2026-382 classifies this under CWE-306 (Missing Authentication for Critical Function), indicating the affected endpoint simply lacks access control rather than having a bypassable one. No public exploit code or CISA KEV listing is confirmed at time of analysis, though the fully unauthenticated network vector with low complexity represents a credible operational risk for any exposed SCG deployment.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows remote unauthenticated attackers to bypass TLS protection mechanisms, enabling man-in-the-middle interception or modification of communications to and from the gateway. Both the Appliance form factor (versions prior to 5.36.00.16) and Application form factor (versions prior to 5.36.00.00) are confirmed affected by Dell advisory DSA-2026-382. No public exploit code exists and EPSS scoring of 0.14% (4th percentile) reflects very low current exploitation probability, consistent with SSVC's 'none' exploitation status.
Relative path traversal in Dell Secure Connect Gateway (SCG) 5.0 allows a low-privileged remote attacker to traverse directory boundaries and achieve remote code execution on affected systems. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis, and Dell has issued a patch under advisory DSA-2026-382.
Remote code execution in Dell Secure Connect Gateway (SCG) 5.0 allows an unauthenticated remote attacker to escape the intended directory and execute arbitrary code by supplying crafted path input. Both the Appliance (versions before 5.36.00.16) and the Application (versions before 5.36.00.00) deployments of SCG 5.0 Virtual Edition are affected. No public exploit identified at time of analysis, and the flaw is not in CISA KEV; EPSS is a modest 0.43% (36th percentile), but the network-reachable, unauthenticated path-traversal-to-RCE profile warrants prompt patching.
Remote code execution in Dell Secure Connect Gateway (SCG) 5.0 allows an unauthenticated remote attacker to exploit a path-traversal flaw and execute code on the appliance. Both the Appliance edition (before 5.36.00.16) and the Application edition (before 5.36.00.00) of the SCG 5.0 virtual-edition telemetry/remote-support gateway are affected. There is no public exploit identified at time of analysis; EPSS estimates a modest 0.35% (28th percentile) exploitation probability and CISA's SSVC framework lists exploitation status as none.
Unauthorized remote access to Dell Secure Connect Gateway (SCG) 5.0 is possible because the product fails to properly validate TLS certificates (CWE-295), affecting the Appliance edition before 5.36.00.16 and the Application edition before 5.36.00.00. An unauthenticated network attacker able to intercept or interpose on connections can defeat the trust chain and gain access to protected resources or data. A vendor patch is available (DSA-2026-382); no public exploit identified at time of analysis and EPSS is low (0.15%).
Local privilege escalation in Dell Secure Connect Gateway 5.0 enables a low-privileged authenticated user with local shell access to gain elevated - likely root or administrator-level - control of the affected host. Both the virtual appliance (prior to 5.36.00.16) and standalone application (prior to 5.36.00.00) deployments are affected, as confirmed by Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified, and vendor-released patches are available for both product variants.
Dell Secure Connect Gateway (SCG) 5.0 exposes a critical management function without any authentication requirement (CWE-306), enabling an unauthenticated remote attacker to achieve full confidentiality, integrity, and availability compromise against affected deployments. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are confirmed vulnerable per Dell advisory DSA-2026-382 and EUVD-2026-72375. No public exploit has been identified at time of analysis; Dell has released patches for both deployment forms.
Relative path traversal in Dell Secure Connect Gateway 5.0 (both Appliance and Application editions) exposes unauthenticated remote attackers to a full-compromise pathway culminating in remote code execution. Both hardware appliance deployments (prior to 5.36.00.16) and software/virtual application deployments (prior to 5.36.00.00) are affected, as confirmed by Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified at time of analysis; EPSS exploitation probability stands at 0.53%, and SSVC classifies exploitation status as none.
Hard-coded credentials embedded in Dell Secure Connect Gateway (SCG) 5.0 expose both the Appliance and Application deployments to unauthenticated remote compromise. A network-accessible attacker who discovers or obtains the static credentials can authenticate without any supplied privileges and gain unauthorized access with high confidentiality and integrity impact. No public exploit or active CISA KEV listing has been identified at time of analysis; Dell has confirmed the vulnerability and released fixed versions via advisory DSA-2026-382.
Remote command execution in Dell Secure Connect Gateway 5.0 (Appliance versions before 5.36.00.16 and Application versions before 5.36.00.00) lets a remote, unauthenticated attacker run commands on the target by sending a specially crafted request that bypasses intended authorization checks. Dell has released fixed versions and the flaw is rated critical (CVSS 9.4). No public exploit identified at time of analysis, and it is not listed in CISA KEV.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 permits a local, low-privileged attacker to execute arbitrary OS commands on the affected host, potentially exposing sensitive configuration data and credentials stored on the appliance. Both physical Appliance deployments (prior to 5.36.00.16) and software Application deployments (prior to 5.36.00.00) are affected, as confirmed in Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified; Dell has released corrective patches for both form factors.
Hard-coded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 enables remote information disclosure by allowing an attacker who extracts the embedded key to decrypt protected communications or data stores. Both the Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00) variants of SCG 5.0 are affected per Dell advisory DSA-2026-382. No public exploit code has been identified at time of analysis, and the vendor has released patches.
Least Privilege Violation in Dell Secure Connect Gateway (SCG) 5.0 allows a locally authenticated high-privileged attacker to perform unauthorized operations beyond their intended permission scope, resulting in low-impact integrity and availability degradation. Affected are both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00). No public exploit or active exploitation has been identified; the low CVSS score of 3.4 reflects the constrained attack surface requiring local, high-privileged access.
Dell Secure Connect Gateway 5.0 Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) contain a CWE-250 Execution with Unnecessary Privileges flaw in which internal components operate with OS-level permissions exceeding what their function requires, allowing a locally authenticated high-privileged attacker to perform unauthorized modifications to system integrity and availability. The affected products are Dell's enterprise remote support gateway platform used to facilitate secure ProSupport connectivity in production environments. No public exploit code has been identified and the CVSS 3.4 Low rating reflects the substantial access prerequisites - local access and a pre-existing high-privilege account - sharply limiting opportunistic exploitation potential.
Least Privilege Violation in Dell Secure Connect Gateway 5.0 allows a locally authenticated, high-privileged attacker to perform actions beyond their authorized scope, resulting in unauthorized integrity and availability impact. Affected deployments include Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, with a vendor-released patch available via Dell Security Advisory DSA-2026-382. No public exploit code or CISA KEV listing has been identified at time of analysis.
Script injection via alternate XSS syntax affects Dell Secure Connect Gateway (SCG) 5.0 in both Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) editions, as disclosed in Dell advisory DSA-2026-382. An unauthenticated remote attacker exploiting CWE-87 can bypass the application's standard XSS filters using alternative injection syntax, causing malicious scripts to execute in the context of affected users' browsers and potentially enabling session hijacking or credential exfiltration. No public exploit code and no CISA KEV listing have been identified; Dell has released patches for both product variants.
Command injection in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance and Application variants - permits unauthenticated remote attackers to perform script injection via network-accessible interfaces. The vulnerability is classified under CWE-77 (Improper Neutralization of Special Elements in a Command), though Dell's own CVSS scoring constrains the impact to limited confidentiality exposure (C:L, I:N, A:N), suggesting the injected scripts are not fully executed as OS-level commands but rather reflected or partially evaluated. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows an unauthenticated remote attacker occupying a network interception position to bypass TLS certificate checks, enabling unauthorized access to protected communications. Both the Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00) variants are affected. Dell has released fixed versions and published advisory DSA-2026-382; no public exploit or active exploitation has been identified at time of analysis.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows a network-positioned unauthenticated attacker to intercept TLS communications, potentially gaining unauthorized access to data in transit. The Appliance variant (prior to 5.36.00.16) and Application variant (prior to 5.36.00.00) are both affected. CVSS 3.7 reflects the high attack complexity requirement - a man-in-the-middle network position - and a limited confidentiality-only impact, with no integrity or availability consequence. No public exploit or CISA KEV listing exists at time of analysis.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 exposes enterprise environments to unauthorized information disclosure via a network-based man-in-the-middle attack. Both the Appliance form factor (versions prior to 5.36.00.16) and the Application form factor (versions prior to 5.36.00.00) are affected. An unauthenticated remote attacker who can intercept network traffic between the SCG and a remote endpoint could present a forged or invalid certificate that the product accepts, allowing interception of sensitive communications. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis, and a vendor-released patch is available.
Improper certificate validation in Dell Secure Connect Gateway 5.0 (both Appliance and Application variants) exposes organizations to protection mechanism bypass by unauthenticated remote attackers positioned on the network path. Affected are all Appliance versions prior to 5.36.00.16 and all Application versions prior to 5.36.00.00, as confirmed by Dell advisory DSA-2026-382 and EUVD-2026-75026. The CVSS 3.7 Low score reflects high attack complexity - requiring man-in-the-middle positioning - with only limited confidentiality impact; no public exploit or active exploitation has been identified at time of analysis.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows a remote, network-positioned attacker to intercept TLS-protected communications via a man-in-the-middle attack, bypassing the TLS protection mechanism and exposing high-confidentiality data. Both the Appliance form factor (versions prior to 5.36.00.16) and the Application form factor (versions prior to 5.36.00.00) are affected. No public exploit or active exploitation has been identified at time of analysis; Dell has released patches under advisory DSA-2026-382.
Hard-coded credentials embedded in Dell Secure Connect Gateway 5.0 (both Appliance and Application deployment forms) allow a remote attacker who discovers those credentials to authenticate without legitimate access and retrieve sensitive information. Dell advisory DSA-2026-382 confirms patches for both variants: Appliance fixed at 5.36.00.16 and Application at 5.36.00.00. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Unauthorized remote access to Dell Secure Connect Gateway 5.0 is enabled by a hard-coded cryptographic key embedded in both the Appliance and Application editions. An attacker who extracts this key - through binary analysis of the software - can leverage it to gain unauthorized access to protected resources, bypassing the confidentiality controls the cryptographic layer is intended to enforce. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis, but a vendor patch has been issued under Dell DSA-2026-382.
Improper neutralization of escape, meta, or control sequences (CWE-116) in Dell Secure Connect Gateway (SCG) 5.0 enables unauthenticated remote attackers to inject malformed sequences into server responses, facilitating phishing attacks against SCG users. Both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00) are affected. Dell has released patched versions per advisory DSA-2026-382; no active exploitation or public exploit code has been identified at time of analysis.
Improper output encoding in Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) variants - allows unauthenticated remote attackers to inject unescaped content into application output, enabling phishing campaigns targeting users of the gateway. The vulnerability is classified as CWE-116 (Improper Encoding or Escaping of Output) and carries a CVSS 5.3 medium score, reflecting network-accessible, zero-authentication exploitation with limited confidentiality impact. Dell has released patches for both product variants under advisory DSA-2026-382; no active exploitation or public proof-of-concept has been identified.
Script injection via improper sanitization of special characters in Dell Secure Connect Gateway 5.0 allows unauthenticated remote attackers to inject script content, resulting in limited confidentiality exposure. Both the Appliance form factor (versions prior to 5.36.00.16) and the Application form factor (versions prior to 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis; Dell has issued a vendor-confirmed patch under advisory DSA-2026-382.
Sensitive information exposure in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance and Application deployment variants - results from debugging code retained in production builds that exposes confidential data to locally authenticated low-privileged users. The flaw covers Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, with patches available under Dell Security Advisory DSA-2026-382. No public exploit code or active exploitation has been identified at time of analysis.
Relative path traversal (CWE-23) in Dell Secure Connect Gateway 5.0 allows unauthenticated remote attackers to access the underlying filesystem of the appliance or application deployment without credentials. Both form factors - the dedicated Appliance (prior to 5.36.00.16) and the software Application (prior to 5.36.00.00) - are affected. Successful exploitation yields limited file read access (C:L) and high-impact file write capability to arbitrary filesystem locations (I:H), creating conditions for persistent configuration tampering or malicious file placement on a security-adjacent platform. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Missing authentication on a critical function in Dell Secure Connect Gateway (SCG) 5.0 allows remote unauthenticated attackers to access protected functionality without credentials, resulting in unauthorized information disclosure. Both deployment forms are affected: the Appliance variant prior to 5.36.00.16 and the Application variant prior to 5.36.00.00. The CVSS 5.3 base score (C:L/I:N/A:N) indicates the immediate impact is limited to read-level unauthorized access; no public exploit code or CISA KEV listing exists at time of analysis.
Exploitation of a TOCTOU race condition in Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance and Application variants - allows a remote unauthenticated attacker to cause denial of service, with marginal confidentiality and integrity impact as reflected in the CVSS vector (C:L/I:L/A:L). The High Attack Complexity rating (AC:H) indicates reliable exploitation requires precise timing to win the race between the check and use operations. No public exploit code or CISA KEV listing has been identified, placing this in the category of a vendor-disclosed race condition with moderate real-world exploitability.
JWT signature verification bypass in Dell Secure Connect Gateway 5.0 enables remote unauthenticated attackers to forge or tamper with cryptographically signed tokens, bypassing the product's authentication protection mechanisms. Both the Appliance variant (versions prior to 5.36.00.16) and Application variant (versions prior to 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis; Dell has released patches under advisory DSA-2026-382.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 enables a network-positioned unauthenticated attacker to intercept encrypted communications via a man-in-the-middle attack, bypassing TLS-based trust mechanisms. Both the appliance form factor (versions prior to 5.36.00.16) and the virtual/application form factor (versions prior to 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis; the CVSS 5.9 Medium rating reflects the high attack complexity imposed by the MITM positioning requirement.
Insufficient entropy in the PRNG used by Dell Secure Connect Gateway (SCG) 5.0 allows a local low-privileged attacker to predict pseudo-random values - session tokens, authentication nonces, or cryptographic keys - generated by the system, ultimately enabling elevation of privileges. Both the virtual Appliance form factor (prior to 5.36.00.16) and the Application form factor (prior to 5.36.00.00) are affected. No public exploit code or CISA KEV listing has been identified at time of analysis, but the confidentiality-only CVSS vector (C:H/I:N) conflicts with the description's claimed elevation-of-privileges outcome, which warrants independent verification.
Dell Secure Connect Gateway (SCG) 5.0 exposes sensitive system information through uncleared debug artifacts accessible to local low-privileged users, affecting both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00). The root cause is CWE-1258: debug data containing sensitive system details is not purged and remains readable on the local filesystem. No public exploit code has been identified and exploitation requires local authenticated access, making real-world impact limited to insider threat scenarios or post-compromise reconnaissance.
Uncleared debug information in Dell Secure Connect Gateway (SCG) 5.0 exposes sensitive system data to physically present unauthenticated attackers. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are affected, per CPE data and the Dell advisory DSA-2026-382. The CVSS vector (AV:P) confirms exploitation is constrained to physical access, yielding a low overall severity of 2.4, and no public exploit or active exploitation has been identified at time of analysis.
Insufficient session expiration in Dell Secure Connect Gateway 5.0 (both Appliance and Application deployments) enables a low-privileged remote attacker to capture and replay session tokens that remain valid beyond their intended lifetime, resulting in session theft and unauthorized access to sensitive data. Both form factors are affected: Application versions prior to 5.36.00.00 and Appliance versions prior to 5.36.00.16. Dell has released patched versions via advisory DSA-2026-382; no public exploit or active exploitation has been identified at time of analysis.
Improper Authentication in Dell Secure Connect Gateway (SCG) 5.0 allows a low-privileged remote attacker to bypass authentication controls and gain unauthorized access to protected resources, resulting in high confidentiality and integrity compromise. Both the Appliance variant (versions prior to 5.36.00.16) and Application variant (versions prior to 5.36.00.00) are affected. Dell has released patched versions and published advisory DSA-2026-382; no public exploit or CISA KEV listing has been identified at time of analysis.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows a remote, unauthenticated attacker in a network-adjacent MITM position to bypass TLS protection mechanisms, potentially intercepting and altering communications between the SCG appliance or application and remote endpoints. Both deployment forms are affected - the physical/virtual appliance (versions prior to 5.36.00.16) and the software application (versions prior to 5.36.00.00). No public exploit or KEV listing exists; this is a medium-severity finding under CVSS 5.6 with high attack complexity reflecting the MITM positioning requirement.
Unsynchronized multithreaded access in Dell Secure Connect Gateway (SCG) 5.0 allows a low-privileged remote attacker to cause denial of service and potentially minor data integrity or confidentiality impact. Both the Appliance variant (fixed in 5.36.00.16) and Application variant (fixed in 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis.
SQL injection in Dell Secure Connect Gateway (SCG) 5.0 allows a remote attacker holding low-privilege credentials to execute unauthorized SQL commands against the product's backend database. Both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00) are affected, with confirmed limited confidentiality and integrity impact but no availability consequence. No active exploitation or public proof-of-concept has been identified at time of analysis; Dell has released patched versions under advisory DSA-2026-382.
Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance and Application editions - writes sensitive information into files or directories that are externally accessible on the local system (CWE-538). A local attacker with low privileges who can read those files gains access to information they should not be authorized to see. No public exploit code exists and no active exploitation has been reported; the low CVSS base score of 3.3 reflects the local, low-privilege access requirement and limited confidentiality impact.
LDAP injection in Dell Secure Connect Gateway 5.0 (both Appliance and Application variants) allows attackers to inject malicious LDAP query elements, leading to script injection against the underlying directory service. The CPE data confirms two distinct deployment forms are affected: the virtual Appliance (fixed at 5.36.00.16) and the Application (fixed at 5.36.00.00), both covered under Dell advisory DSA-2026-382. Critically, the description characterizes the attacker as unauthenticated, but the provided CVSS vector specifies PR:H - a direct contradiction that must be clarified with Dell before this vulnerability is triaged or deprioritized.
Plaintext credential storage in Dell Secure Connect Gateway 5.0 exposes passwords to local low-privileged attackers, leading to information disclosure. Both the Appliance variant (prior to 5.36.00.16) and Application variant (prior to 5.36.00.00) are affected, as confirmed by Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified; the CVSS score of 4.7 Medium reflects the local-only, high-complexity attack path.
Improper certificate validation in Dell Secure Connect Gateway 5.0 (both Appliance and Application editions) exposes encrypted communications to interception by remote, unauthenticated attackers positioned on the network path. The vulnerability stems from CWE-295 failure to properly verify TLS/SSL certificates, enabling a MITM attacker to present a fraudulent certificate that the product accepts, thereby gaining access to traffic that should be protected. CVSS 5.9 (AC:H) reflects that exploitation requires the attacker to occupy an adversarial network position; no public exploit or KEV listing has been identified at time of analysis.
Hard-coded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 allows a local low-privileged attacker to decrypt protected data, leading to high-severity information disclosure. Both the Appliance form factor (prior to 5.36.00.16) and the Application form factor (prior to 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis, and the local access requirement significantly constrains the attack surface.
Improper locking in Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application allows a low-privileged remote attacker to exploit a synchronization race condition, resulting in unauthorized filesystem access on the affected system. The vendor CVSS vector rates the primary impact as A:H (Availability), yet the description specifically references attacker filesystem access - a tension that suggests possible confidentiality or integrity impact beyond what the official score reflects. Dell has released fixed versions and published advisory DSA-2026-382; no public exploit or active CISA KEV listing exists at time of analysis.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows a locally authenticated low-privileged attacker to conduct server-side request forgery, resulting in high confidentiality impact with no integrity or availability loss. Both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00) are affected, as confirmed by Dell Security Advisory DSA-2026-382. No public exploit code and no CISA KEV listing have been identified at time of analysis, placing this in routine patch-cycle priority rather than emergency response.
Cleartext storage of sensitive information in Dell Secure Connect Gateway 5.0 exposes credentials or configuration secrets to any low-privileged local user on the host. Both the hardware Appliance (versions prior to 5.36.00.16) and the virtual Application (versions prior to 5.36.00.00) are affected, as confirmed by Dell Security Advisory DSA-2026-382. No public exploit identified at time of analysis, but the CVSS C:H rating indicates that successful exploitation yields full confidentiality compromise of the stored sensitive material.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance (prior to 5.36.00.16) and Application/Virtual Edition (prior to 5.36.00.00) - allows an unauthenticated remote attacker with a network man-in-the-middle position to intercept or tamper with TLS-protected communications between the SCG and remote endpoints. The CVSS 5.6 score with AC:H reflects that exploitation is constrained by the requirement for network-level interception capability rather than direct remote access. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Certificate hostname validation bypass in Dell Secure Connect Gateway (SCG) 5.0 enables unauthenticated remote attackers positioned on the network path to perform man-in-the-middle attacks against TLS-protected communications. The flaw (CWE-297) means SCG accepts certificates whose hostname does not match the server being contacted, allowing an adversary to impersonate backend endpoints and intercept or manipulate encrypted traffic. No public exploit code has been identified, and the vulnerability has not been added to the CISA KEV catalog; however, the network-accessible attack vector and absence of required privileges make opportunistic interception feasible for network-adjacent adversaries.
Incorrect permission assignment on critical resources in Dell Secure Connect Gateway 5.0 (both Appliance and Application variants) enables a locally authenticated low-privileged user to read sensitive data they are not authorized to access. Affected are Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, as confirmed in Dell advisory DSA-2026-382. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, though the high confidentiality impact from a CWE-732 flaw in a remote-support gateway warrants prioritized patching for insider-threat scenarios.
OS Command Injection (CWE-78) in Dell Secure Connect Gateway 5.0 permits low-privileged remote attackers to execute arbitrary operating system commands against both the Appliance and Application deployment variants. Affected versions are SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00; Dell has released fixes under advisory DSA-2026-382. No public exploit code or CISA KEV listing has been identified at time of analysis.
Sensitive information exposure in Dell Secure Connect Gateway (SCG) 5.0 allows a low-privileged local attacker to read sensitive data written to application log files without sanitization. Both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00) are affected across all platforms. No public exploit code or active exploitation has been identified; Dell has released fixes via advisory DSA-2026-382.
Hardcoded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance and Application variants - allows a low-privileged local attacker to access protected data encrypted with the embedded key, leading to information disclosure. Affected versions include SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00. Dell has released patched versions via DSA-2026-382; no public exploit or KEV listing has been identified at time of analysis.
Hard-coded credentials in Dell Secure Connect Gateway (SCG) 5.0 enable remote attackers to bypass authentication and access protected system functions. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are confirmed affected per Dell advisory DSA-2026-382. Exploitation exposes sensitive information with high confidentiality impact, and no active exploitation or public proof-of-concept has been identified at time of analysis.
Hard-coded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 allows a local low-privileged attacker to decrypt data that was intended to be cryptographically protected, resulting in high-severity information disclosure. Both the Appliance form factor (versions prior to 5.36.00.16) and the Application form factor (versions prior to 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis; Dell has released patches via advisory DSA-2026-382.
Improper Authentication (CWE-287) in Dell Secure Connect Gateway (SCG) 5.0 enables a remote, low-privileged attacker to bypass protection mechanisms, potentially gaining access to sensitive telemetry or support data beyond their authorized scope. Both the Appliance variant (prior to 5.36.00.16) and Application variant (prior to 5.36.00.00) are affected, as confirmed in Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified at time of analysis, but the network-accessible attack vector and low authentication bar make patching a clear priority.
Remote unauthenticated denial-of-service in Dell Secure Connect Gateway (SCG) 5.0 allows network-adjacent attackers to crash or disable the gateway's protection mechanisms by sending crafted input that triggers an unhandled exceptional condition (CWE-703). Both the physical Appliance variant (prior to 5.36.00.16) and the virtual Application variant (prior to 5.36.00.00) are affected. The primary impact is loss of availability of the SCG service, meaning the gateway's security inspection or remote-support connectivity function is disrupted; no public exploit or active exploitation has been identified at time of analysis.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 enables a locally authenticated low-privilege attacker to execute arbitrary operating system commands, resulting in full confidentiality, integrity, and availability compromise of the affected system. Both the Appliance deployment form (virtual/hardware) and the Application package are affected, with fix versions 5.36.00.16 and 5.36.00.00 respectively confirmed by Dell advisory DSA-2026-382. No public exploit code and no CISA KEV active-exploitation listing are identified at time of analysis.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) variants - enables a locally authenticated low-privileged attacker to execute arbitrary operating system commands, yielding full compromise of confidentiality, integrity, and availability of the affected host. Dell confirmed the issue in advisory DSA-2026-382 and released patches for both deployment forms. No public exploit code or active exploitation has been identified at time of analysis; SSVC rates exploitation as none and the attack as non-automatable.
Remote code execution in Dell Secure Connect Gateway (SCG) 5.0 Virtual Edition allows an unauthenticated network attacker to inject arbitrary operating-system commands via improperly neutralized special elements (CWE-78). Affected are the SCG 5.0 Appliance component before 5.36.00.16 and the SCG 5.0 Application component before 5.36.00.00; a vendor patch is available via Dell advisory DSA-2026-382. No public exploit identified at time of analysis, but the network-reachable, no-authentication attack path and 9.8 CVSS make this a high-priority remote-takeover risk.
Command injection in Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance (before 5.36.00.16) and Application (before 5.36.00.00) variants - allows an unauthenticated remote attacker to inject and execute commands, described by Dell as script injection. The CVSS 9.8 vector rates all three impacts as high (C:H/I:H/A:H), though CISA SSVC scores the technical impact as only partial. No public exploit identified at time of analysis and SSVC exploitation status is 'none', but the flaw is marked automatable, raising the risk of scanning-driven mass exploitation once a technique surfaces.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance and Application deployment forms - enables a locally authenticated low-privileged user to inject and execute arbitrary operating system commands. Affected are Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, with full confidentiality, integrity, and availability impact on the underlying host. No public exploit code has been identified at time of analysis, and CISA SSVC rates exploitation as currently none with non-automatable attack delivery.
Hard-coded credentials in Dell Secure Connect Gateway (SCG) 5.0 expose both the Appliance and Application deployments to unauthenticated remote information disclosure. Any attacker who discovers or reverse-engineers the embedded static credentials - which cannot be changed by administrators - can authenticate to the gateway without valid user accounts and access sensitive information. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no privileges or user interaction; no public exploit or CISA KEV listing is recorded at time of analysis.
Hard-coded credentials embedded in Dell Secure Connect Gateway 5.0 allow a remote, unauthenticated attacker to authenticate to the service using the static credentials and access sensitive information. Both the Appliance variant (all versions prior to 5.36.00.16) and the Application variant (all versions prior to 5.36.00.00) are affected, as confirmed by Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified, but CWE-798 credentials are static across all unpatched installations worldwide, meaning any party with knowledge of them can exploit any exposed instance without further effort.
Hard-coded credentials in Dell Secure Connect Gateway (SCG) 5.0 expose sensitive information to unauthenticated remote attackers across both the Appliance and Application deployment variants. The vulnerability (CWE-798) allows an attacker who discovers or possesses the embedded credentials to authenticate without authorization and access confidential data. Dell has released patched versions under advisory DSA-2026-382, and no public exploits or CISA KEV listing have been identified at time of analysis.
SQL injection in Dell Secure Connect Gateway (SCG) 5.0 allows a remote high-privileged attacker to execute arbitrary SQL commands against the backend database, resulting in unauthorized access to sensitive data and potential data manipulation. Both the Appliance edition (before 5.36.00.16) and the Application edition (before 5.36.00.00) are affected. No public exploit code has been identified at time of analysis, and the mandatory high-privilege requirement substantially limits the realistic attack surface.
Unauthorized ADMIN access in Dell Secure Connect Gateway (SCG) 5.0 allows a remote unauthenticated attacker to replay a previously captured request indefinitely, forging ADMIN-level access and refresh tokens. Because the token-issuing flow performs no nonce validation and enforces no request expiry, a single intercepted request grants durable administrative control of the gateway. The Appliance edition is affected before 5.36.00.16 and the Application edition before 5.36.00.00; no public exploit identified at time of analysis, and it is not listed in CISA KEV.
External control of file name or path (CWE-73) in Dell Secure Connect Gateway (SCG) 5.0 enables unauthenticated remote attackers to influence filesystem path resolution, resulting in unauthorized filesystem access. Both the Appliance form factor (versions before 5.36.00.16) and the Application form factor (versions before 5.36.00.00) are affected. Dell has released patched versions and published advisory DSA-2026-382; no public exploit code or active exploitation has been identified at this time.
Missing brute-force rate-limiting in Dell Secure Connect Gateway (SCG) 5.0 Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) exposes authentication endpoints to unlimited credential-guessing by unauthenticated remote attackers over the network. Successful exploitation allows an attacker to enumerate and compromise valid credentials, with Dell indicating the resulting access can enable client-side request forgery. No public exploit code or CISA KEV listing has been identified at time of analysis.
Denial-of-service via compression bomb in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to exhaust server resources by sending highly compressed payloads that expand dramatically upon decompression. Both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00) are affected. No public exploit code has been identified at time of analysis, and active exploitation has not been confirmed by CISA KEV.
Path traversal in Dell Secure Connect Gateway (SCG) 5.0 exposes restricted filesystem paths to unauthenticated remote attackers across both Appliance and Application deployment variants. The vulnerability (CWE-22) allows directory escape via crafted request paths, resulting in unauthorized access to files outside the intended serving root. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; however, the unauthenticated network-accessible attack surface and low complexity make this a credible priority for enterprise Dell infrastructure operators.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application allows a network-positioned unauthenticated attacker to conduct man-in-the-middle attacks, intercepting and potentially modifying encrypted communications between the SCG and Dell's remote support infrastructure. Affected versions are SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00, as confirmed by Dell advisory DSA-2026-382. No public exploit code or CISA KEV listing exists at time of analysis, but successful exploitation yields high confidentiality and integrity impact on all intercepted support traffic.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows an unauthenticated network-positioned attacker to conduct man-in-the-middle attacks against both the Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) deployment forms, intercepting and potentially tampering with encrypted remote-support communications to achieve unauthorized access. Dell confirmed the vulnerability under advisory DSA-2026-382 with a CVSS 7.7 (High) rating; the AC:H metric reflects the MITM positioning prerequisite, which is the primary exploitation barrier. No public exploit code has been identified at time of analysis.
Remote code execution via a download-without-integrity-check flaw affects Dell Secure Connect Gateway (SCG) 5.0 in both its Appliance and Application deployment forms. An unauthenticated network-adjacent attacker who can achieve a man-in-the-middle position between the SCG system and Dell's update infrastructure can substitute malicious code for legitimate downloads, leading to command execution on the appliance. The CVSS vector (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H) captures the high attack complexity from the MITM requirement alongside the absence of authentication prerequisites. No public exploit has been identified at time of analysis.
Server-Side Request Forgery (SSRF) in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to coerce the appliance or application into issuing arbitrary HTTP/HTTPS requests to internal or external destinations, leading to unauthorized access to internal network services, cloud metadata endpoints, or other back-end resources not intended for external exposure. Both the Appliance and Application deployment modes are affected across all versions prior to the fixed releases. No public exploit code or active exploitation has been identified at time of analysis, but the low-complexity, unauthenticated network vector makes this straightforwardly exploitable against any internet- or intranet-accessible instance.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 enables a low-privileged authenticated remote attacker to inject arbitrary OS commands and escalate to full system control, achieving complete confidentiality, integrity, and availability compromise. Both the SCG 5.0 Appliance (fixed in 5.36.00.16) and SCG 5.0 Application (fixed in 5.36.00.00) variants are affected. No public exploit identified at time of analysis, and the high attack complexity (AC:H) suggests a specific condition or non-trivial technique is required beyond simple credential possession.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows remote unauthenticated attackers to exploit TLS/certificate handling weaknesses, leading to unauthorized access and high-availability impact. Both the Appliance (Virtual Edition) builds prior to 5.36.00.16 and Application builds prior to 5.36.00.00 are affected. No public exploit code or CISA KEV listing has been identified at time of analysis, but the unauthenticated network vector and CVSS 8.2 score make this a priority patching item for environments running Dell infrastructure monitoring.
Improper certificate validation in Dell Secure Connect Gateway 5.0 exposes both Appliance and Application deployments to unauthenticated remote exploitation, enabling MITM-style attacks that bypass TLS trust enforcement and grant unauthorized access to communications relayed through the gateway. The Appliance variant is affected below version 5.36.00.16 and the Application variant below 5.36.00.00. No active exploitation has been confirmed by CISA KEV and no public exploit code is referenced, but the zero-authentication network vector makes patching urgent for any internet-reachable SCG deployment.
Improper certificate validation in Dell Secure Connect Gateway 5.0 (both Appliance and Application variants) enables an unauthenticated remote attacker with a man-in-the-middle network position to intercept and modify encrypted communications between the SCG platform and Dell's support infrastructure. Rated CVSS 7.4 (CWE-295) with high confidentiality and integrity impact, this flaw is particularly sensitive given that SCG routinely carries privileged support telemetry and credentials. No public exploit code and no CISA KEV listing have been identified at time of analysis; Dell has released patches in advisory DSA-2026-382.
Privilege escalation in Dell Secure Connect Gateway (SCG) 5.0 allows a local attacker with basic system access to gain full administrative control of the affected host. The root cause is improper privilege management (CWE-269) in both the SCG 5.0 Application (prior to 5.36.00.00) and SCG 5.0 Appliance (prior to 5.36.00.16), as confirmed by Dell advisory DSA-2026-382. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA KEV catalog.
Improper Certificate Validation (CWE-295) in Dell Secure Connect Gateway (SCG) 5.0 allows an unauthenticated attacker positioned on the same network segment to intercept or manipulate TLS-protected communications, leading to unauthorized access to sensitive data or remote-support sessions. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are affected. The CVSS AV:A vector confirms this is not a direct internet exploit - the attacker must be adjacent to the network segment hosting the SCG deployment. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 allows a high-privileged remote attacker to inject arbitrary OS commands through the application's management interface, achieving privilege escalation beyond the application boundary to OS-level access. Both the SCG 5.0 Appliance (prior to 5.36.00.16) and SCG 5.0 Application (prior to 5.36.00.00) are affected, confirmed by Dell advisory DSA-2026-382. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; Dell has released patched versions for both product variants.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 exposes both Appliance and Application variants to protection mechanism bypass by unauthenticated remote attackers. The flaw (CWE-295) allows an adversary in a network-interception position to present an invalid or attacker-controlled TLS certificate that the SCG accepts without proper verification, potentially enabling interception or manipulation of communications between the gateway and backend or managed systems. Patch availability is confirmed via Dell advisory DSA-2026-382; no public exploit or CISA KEV listing is present at time of analysis.
Unauthorized remote access to Dell Secure Connect Gateway (SCG) 5.0 is possible through a logic flaw rooted in CWE-480 (Use of Incorrect Operator), affecting both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00). The incorrect operator in a security-relevant conditional-likely an authentication or authorization check-produces a logic outcome that permits access without valid credentials, consistent with the CVSS PR:N vector and the 'Authentication Bypass' classification. Real-world impact spans limited confidentiality, integrity, and availability loss per the CVSS L/L/L impact ratings; no public exploit code or CISA KEV entry has been identified at time of analysis.
Improper TLS certificate validation in Dell Secure Connect Gateway 5.0 allows an unauthenticated remote attacker occupying a man-in-the-middle network position to intercept and tamper with encrypted SCG communications, leading to unauthorized access. Both the physical Appliance variant (fixed in 5.36.00.16) and the virtual Application variant (fixed in 5.36.00.00) are affected across all 5.0.x releases preceding those thresholds, per Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified at time of analysis.
Missing authentication on critical API functions in Dell Secure Connect Gateway (SCG) 5.0 exposes privileged operations to remote unauthenticated attackers, enabling unauthorized access that yields high integrity impact and limited confidentiality exposure. Both deployment forms - the virtual Appliance (prior to 5.36.00.16) and the Application (prior to 5.36.00.00) - are affected. Dell has released patches via advisory DSA-2026-382; no public exploit or CISA KEV listing exists at time of analysis, but the attack path (AV:N/AC:L/PR:N/UI:N) requires minimal attacker capability.
Unauthenticated remote exploitation of Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance variant (prior to 5.36.00.16) and Application variant (prior to 5.36.00.00) - exposes a critical function with no authentication gate, allowing a network-adjacent or internet-facing attacker to trigger high-availability-impact operations without any credentials. Dell's advisory DSA-2026-382 classifies this under CWE-306 (Missing Authentication for Critical Function), indicating the affected endpoint simply lacks access control rather than having a bypassable one. No public exploit code or CISA KEV listing is confirmed at time of analysis, though the fully unauthenticated network vector with low complexity represents a credible operational risk for any exposed SCG deployment.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows remote unauthenticated attackers to bypass TLS protection mechanisms, enabling man-in-the-middle interception or modification of communications to and from the gateway. Both the Appliance form factor (versions prior to 5.36.00.16) and Application form factor (versions prior to 5.36.00.00) are confirmed affected by Dell advisory DSA-2026-382. No public exploit code exists and EPSS scoring of 0.14% (4th percentile) reflects very low current exploitation probability, consistent with SSVC's 'none' exploitation status.
Relative path traversal in Dell Secure Connect Gateway (SCG) 5.0 allows a low-privileged remote attacker to traverse directory boundaries and achieve remote code execution on affected systems. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis, and Dell has issued a patch under advisory DSA-2026-382.
Remote code execution in Dell Secure Connect Gateway (SCG) 5.0 allows an unauthenticated remote attacker to escape the intended directory and execute arbitrary code by supplying crafted path input. Both the Appliance (versions before 5.36.00.16) and the Application (versions before 5.36.00.00) deployments of SCG 5.0 Virtual Edition are affected. No public exploit identified at time of analysis, and the flaw is not in CISA KEV; EPSS is a modest 0.43% (36th percentile), but the network-reachable, unauthenticated path-traversal-to-RCE profile warrants prompt patching.
Remote code execution in Dell Secure Connect Gateway (SCG) 5.0 allows an unauthenticated remote attacker to exploit a path-traversal flaw and execute code on the appliance. Both the Appliance edition (before 5.36.00.16) and the Application edition (before 5.36.00.00) of the SCG 5.0 virtual-edition telemetry/remote-support gateway are affected. There is no public exploit identified at time of analysis; EPSS estimates a modest 0.35% (28th percentile) exploitation probability and CISA's SSVC framework lists exploitation status as none.
Unauthorized remote access to Dell Secure Connect Gateway (SCG) 5.0 is possible because the product fails to properly validate TLS certificates (CWE-295), affecting the Appliance edition before 5.36.00.16 and the Application edition before 5.36.00.00. An unauthenticated network attacker able to intercept or interpose on connections can defeat the trust chain and gain access to protected resources or data. A vendor patch is available (DSA-2026-382); no public exploit identified at time of analysis and EPSS is low (0.15%).
Local privilege escalation in Dell Secure Connect Gateway 5.0 enables a low-privileged authenticated user with local shell access to gain elevated - likely root or administrator-level - control of the affected host. Both the virtual appliance (prior to 5.36.00.16) and standalone application (prior to 5.36.00.00) deployments are affected, as confirmed by Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified, and vendor-released patches are available for both product variants.
Dell Secure Connect Gateway (SCG) 5.0 exposes a critical management function without any authentication requirement (CWE-306), enabling an unauthenticated remote attacker to achieve full confidentiality, integrity, and availability compromise against affected deployments. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are confirmed vulnerable per Dell advisory DSA-2026-382 and EUVD-2026-72375. No public exploit has been identified at time of analysis; Dell has released patches for both deployment forms.
Relative path traversal in Dell Secure Connect Gateway 5.0 (both Appliance and Application editions) exposes unauthenticated remote attackers to a full-compromise pathway culminating in remote code execution. Both hardware appliance deployments (prior to 5.36.00.16) and software/virtual application deployments (prior to 5.36.00.00) are affected, as confirmed by Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified at time of analysis; EPSS exploitation probability stands at 0.53%, and SSVC classifies exploitation status as none.
Hard-coded credentials embedded in Dell Secure Connect Gateway (SCG) 5.0 expose both the Appliance and Application deployments to unauthenticated remote compromise. A network-accessible attacker who discovers or obtains the static credentials can authenticate without any supplied privileges and gain unauthorized access with high confidentiality and integrity impact. No public exploit or active CISA KEV listing has been identified at time of analysis; Dell has confirmed the vulnerability and released fixed versions via advisory DSA-2026-382.
Remote command execution in Dell Secure Connect Gateway 5.0 (Appliance versions before 5.36.00.16 and Application versions before 5.36.00.00) lets a remote, unauthenticated attacker run commands on the target by sending a specially crafted request that bypasses intended authorization checks. Dell has released fixed versions and the flaw is rated critical (CVSS 9.4). No public exploit identified at time of analysis, and it is not listed in CISA KEV.
OS command injection in Dell Secure Connect Gateway (SCG) 5.0 permits a local, low-privileged attacker to execute arbitrary OS commands on the affected host, potentially exposing sensitive configuration data and credentials stored on the appliance. Both physical Appliance deployments (prior to 5.36.00.16) and software Application deployments (prior to 5.36.00.00) are affected, as confirmed in Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified; Dell has released corrective patches for both form factors.
Hard-coded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 enables remote information disclosure by allowing an attacker who extracts the embedded key to decrypt protected communications or data stores. Both the Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00) variants of SCG 5.0 are affected per Dell advisory DSA-2026-382. No public exploit code has been identified at time of analysis, and the vendor has released patches.
Least Privilege Violation in Dell Secure Connect Gateway (SCG) 5.0 allows a locally authenticated high-privileged attacker to perform unauthorized operations beyond their intended permission scope, resulting in low-impact integrity and availability degradation. Affected are both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00). No public exploit or active exploitation has been identified; the low CVSS score of 3.4 reflects the constrained attack surface requiring local, high-privileged access.
Dell Secure Connect Gateway 5.0 Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) contain a CWE-250 Execution with Unnecessary Privileges flaw in which internal components operate with OS-level permissions exceeding what their function requires, allowing a locally authenticated high-privileged attacker to perform unauthorized modifications to system integrity and availability. The affected products are Dell's enterprise remote support gateway platform used to facilitate secure ProSupport connectivity in production environments. No public exploit code has been identified and the CVSS 3.4 Low rating reflects the substantial access prerequisites - local access and a pre-existing high-privilege account - sharply limiting opportunistic exploitation potential.
Least Privilege Violation in Dell Secure Connect Gateway 5.0 allows a locally authenticated, high-privileged attacker to perform actions beyond their authorized scope, resulting in unauthorized integrity and availability impact. Affected deployments include Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, with a vendor-released patch available via Dell Security Advisory DSA-2026-382. No public exploit code or CISA KEV listing has been identified at time of analysis.
Script injection via alternate XSS syntax affects Dell Secure Connect Gateway (SCG) 5.0 in both Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) editions, as disclosed in Dell advisory DSA-2026-382. An unauthenticated remote attacker exploiting CWE-87 can bypass the application's standard XSS filters using alternative injection syntax, causing malicious scripts to execute in the context of affected users' browsers and potentially enabling session hijacking or credential exfiltration. No public exploit code and no CISA KEV listing have been identified; Dell has released patches for both product variants.
Command injection in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance and Application variants - permits unauthenticated remote attackers to perform script injection via network-accessible interfaces. The vulnerability is classified under CWE-77 (Improper Neutralization of Special Elements in a Command), though Dell's own CVSS scoring constrains the impact to limited confidentiality exposure (C:L, I:N, A:N), suggesting the injected scripts are not fully executed as OS-level commands but rather reflected or partially evaluated. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows an unauthenticated remote attacker occupying a network interception position to bypass TLS certificate checks, enabling unauthorized access to protected communications. Both the Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00) variants are affected. Dell has released fixed versions and published advisory DSA-2026-382; no public exploit or active exploitation has been identified at time of analysis.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows a network-positioned unauthenticated attacker to intercept TLS communications, potentially gaining unauthorized access to data in transit. The Appliance variant (prior to 5.36.00.16) and Application variant (prior to 5.36.00.00) are both affected. CVSS 3.7 reflects the high attack complexity requirement - a man-in-the-middle network position - and a limited confidentiality-only impact, with no integrity or availability consequence. No public exploit or CISA KEV listing exists at time of analysis.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 exposes enterprise environments to unauthorized information disclosure via a network-based man-in-the-middle attack. Both the Appliance form factor (versions prior to 5.36.00.16) and the Application form factor (versions prior to 5.36.00.00) are affected. An unauthenticated remote attacker who can intercept network traffic between the SCG and a remote endpoint could present a forged or invalid certificate that the product accepts, allowing interception of sensitive communications. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis, and a vendor-released patch is available.
Improper certificate validation in Dell Secure Connect Gateway 5.0 (both Appliance and Application variants) exposes organizations to protection mechanism bypass by unauthenticated remote attackers positioned on the network path. Affected are all Appliance versions prior to 5.36.00.16 and all Application versions prior to 5.36.00.00, as confirmed by Dell advisory DSA-2026-382 and EUVD-2026-75026. The CVSS 3.7 Low score reflects high attack complexity - requiring man-in-the-middle positioning - with only limited confidentiality impact; no public exploit or active exploitation has been identified at time of analysis.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows a remote, network-positioned attacker to intercept TLS-protected communications via a man-in-the-middle attack, bypassing the TLS protection mechanism and exposing high-confidentiality data. Both the Appliance form factor (versions prior to 5.36.00.16) and the Application form factor (versions prior to 5.36.00.00) are affected. No public exploit or active exploitation has been identified at time of analysis; Dell has released patches under advisory DSA-2026-382.
Hard-coded credentials embedded in Dell Secure Connect Gateway 5.0 (both Appliance and Application deployment forms) allow a remote attacker who discovers those credentials to authenticate without legitimate access and retrieve sensitive information. Dell advisory DSA-2026-382 confirms patches for both variants: Appliance fixed at 5.36.00.16 and Application at 5.36.00.00. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Unauthorized remote access to Dell Secure Connect Gateway 5.0 is enabled by a hard-coded cryptographic key embedded in both the Appliance and Application editions. An attacker who extracts this key - through binary analysis of the software - can leverage it to gain unauthorized access to protected resources, bypassing the confidentiality controls the cryptographic layer is intended to enforce. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis, but a vendor patch has been issued under Dell DSA-2026-382.
Improper neutralization of escape, meta, or control sequences (CWE-116) in Dell Secure Connect Gateway (SCG) 5.0 enables unauthenticated remote attackers to inject malformed sequences into server responses, facilitating phishing attacks against SCG users. Both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00) are affected. Dell has released patched versions per advisory DSA-2026-382; no active exploitation or public exploit code has been identified at time of analysis.
Improper output encoding in Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) variants - allows unauthenticated remote attackers to inject unescaped content into application output, enabling phishing campaigns targeting users of the gateway. The vulnerability is classified as CWE-116 (Improper Encoding or Escaping of Output) and carries a CVSS 5.3 medium score, reflecting network-accessible, zero-authentication exploitation with limited confidentiality impact. Dell has released patches for both product variants under advisory DSA-2026-382; no active exploitation or public proof-of-concept has been identified.
Script injection via improper sanitization of special characters in Dell Secure Connect Gateway 5.0 allows unauthenticated remote attackers to inject script content, resulting in limited confidentiality exposure. Both the Appliance form factor (versions prior to 5.36.00.16) and the Application form factor (versions prior to 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis; Dell has issued a vendor-confirmed patch under advisory DSA-2026-382.
Sensitive information exposure in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance and Application deployment variants - results from debugging code retained in production builds that exposes confidential data to locally authenticated low-privileged users. The flaw covers Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, with patches available under Dell Security Advisory DSA-2026-382. No public exploit code or active exploitation has been identified at time of analysis.
Relative path traversal (CWE-23) in Dell Secure Connect Gateway 5.0 allows unauthenticated remote attackers to access the underlying filesystem of the appliance or application deployment without credentials. Both form factors - the dedicated Appliance (prior to 5.36.00.16) and the software Application (prior to 5.36.00.00) - are affected. Successful exploitation yields limited file read access (C:L) and high-impact file write capability to arbitrary filesystem locations (I:H), creating conditions for persistent configuration tampering or malicious file placement on a security-adjacent platform. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Missing authentication on a critical function in Dell Secure Connect Gateway (SCG) 5.0 allows remote unauthenticated attackers to access protected functionality without credentials, resulting in unauthorized information disclosure. Both deployment forms are affected: the Appliance variant prior to 5.36.00.16 and the Application variant prior to 5.36.00.00. The CVSS 5.3 base score (C:L/I:N/A:N) indicates the immediate impact is limited to read-level unauthorized access; no public exploit code or CISA KEV listing exists at time of analysis.
Exploitation of a TOCTOU race condition in Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance and Application variants - allows a remote unauthenticated attacker to cause denial of service, with marginal confidentiality and integrity impact as reflected in the CVSS vector (C:L/I:L/A:L). The High Attack Complexity rating (AC:H) indicates reliable exploitation requires precise timing to win the race between the check and use operations. No public exploit code or CISA KEV listing has been identified, placing this in the category of a vendor-disclosed race condition with moderate real-world exploitability.
JWT signature verification bypass in Dell Secure Connect Gateway 5.0 enables remote unauthenticated attackers to forge or tamper with cryptographically signed tokens, bypassing the product's authentication protection mechanisms. Both the Appliance variant (versions prior to 5.36.00.16) and Application variant (versions prior to 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis; Dell has released patches under advisory DSA-2026-382.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 enables a network-positioned unauthenticated attacker to intercept encrypted communications via a man-in-the-middle attack, bypassing TLS-based trust mechanisms. Both the appliance form factor (versions prior to 5.36.00.16) and the virtual/application form factor (versions prior to 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis; the CVSS 5.9 Medium rating reflects the high attack complexity imposed by the MITM positioning requirement.
Insufficient entropy in the PRNG used by Dell Secure Connect Gateway (SCG) 5.0 allows a local low-privileged attacker to predict pseudo-random values - session tokens, authentication nonces, or cryptographic keys - generated by the system, ultimately enabling elevation of privileges. Both the virtual Appliance form factor (prior to 5.36.00.16) and the Application form factor (prior to 5.36.00.00) are affected. No public exploit code or CISA KEV listing has been identified at time of analysis, but the confidentiality-only CVSS vector (C:H/I:N) conflicts with the description's claimed elevation-of-privileges outcome, which warrants independent verification.
Dell Secure Connect Gateway (SCG) 5.0 exposes sensitive system information through uncleared debug artifacts accessible to local low-privileged users, affecting both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00). The root cause is CWE-1258: debug data containing sensitive system details is not purged and remains readable on the local filesystem. No public exploit code has been identified and exploitation requires local authenticated access, making real-world impact limited to insider threat scenarios or post-compromise reconnaissance.
Uncleared debug information in Dell Secure Connect Gateway (SCG) 5.0 exposes sensitive system data to physically present unauthenticated attackers. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are affected, per CPE data and the Dell advisory DSA-2026-382. The CVSS vector (AV:P) confirms exploitation is constrained to physical access, yielding a low overall severity of 2.4, and no public exploit or active exploitation has been identified at time of analysis.
Insufficient session expiration in Dell Secure Connect Gateway 5.0 (both Appliance and Application deployments) enables a low-privileged remote attacker to capture and replay session tokens that remain valid beyond their intended lifetime, resulting in session theft and unauthorized access to sensitive data. Both form factors are affected: Application versions prior to 5.36.00.00 and Appliance versions prior to 5.36.00.16. Dell has released patched versions via advisory DSA-2026-382; no public exploit or active exploitation has been identified at time of analysis.
Improper Authentication in Dell Secure Connect Gateway (SCG) 5.0 allows a low-privileged remote attacker to bypass authentication controls and gain unauthorized access to protected resources, resulting in high confidentiality and integrity compromise. Both the Appliance variant (versions prior to 5.36.00.16) and Application variant (versions prior to 5.36.00.00) are affected. Dell has released patched versions and published advisory DSA-2026-382; no public exploit or CISA KEV listing has been identified at time of analysis.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows a remote, unauthenticated attacker in a network-adjacent MITM position to bypass TLS protection mechanisms, potentially intercepting and altering communications between the SCG appliance or application and remote endpoints. Both deployment forms are affected - the physical/virtual appliance (versions prior to 5.36.00.16) and the software application (versions prior to 5.36.00.00). No public exploit or KEV listing exists; this is a medium-severity finding under CVSS 5.6 with high attack complexity reflecting the MITM positioning requirement.
Unsynchronized multithreaded access in Dell Secure Connect Gateway (SCG) 5.0 allows a low-privileged remote attacker to cause denial of service and potentially minor data integrity or confidentiality impact. Both the Appliance variant (fixed in 5.36.00.16) and Application variant (fixed in 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis.
SQL injection in Dell Secure Connect Gateway (SCG) 5.0 allows a remote attacker holding low-privilege credentials to execute unauthorized SQL commands against the product's backend database. Both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00) are affected, with confirmed limited confidentiality and integrity impact but no availability consequence. No active exploitation or public proof-of-concept has been identified at time of analysis; Dell has released patched versions under advisory DSA-2026-382.
Dell Secure Connect Gateway (SCG) 5.0 - both the Appliance and Application editions - writes sensitive information into files or directories that are externally accessible on the local system (CWE-538). A local attacker with low privileges who can read those files gains access to information they should not be authorized to see. No public exploit code exists and no active exploitation has been reported; the low CVSS base score of 3.3 reflects the local, low-privilege access requirement and limited confidentiality impact.
LDAP injection in Dell Secure Connect Gateway 5.0 (both Appliance and Application variants) allows attackers to inject malicious LDAP query elements, leading to script injection against the underlying directory service. The CPE data confirms two distinct deployment forms are affected: the virtual Appliance (fixed at 5.36.00.16) and the Application (fixed at 5.36.00.00), both covered under Dell advisory DSA-2026-382. Critically, the description characterizes the attacker as unauthenticated, but the provided CVSS vector specifies PR:H - a direct contradiction that must be clarified with Dell before this vulnerability is triaged or deprioritized.
Plaintext credential storage in Dell Secure Connect Gateway 5.0 exposes passwords to local low-privileged attackers, leading to information disclosure. Both the Appliance variant (prior to 5.36.00.16) and Application variant (prior to 5.36.00.00) are affected, as confirmed by Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified; the CVSS score of 4.7 Medium reflects the local-only, high-complexity attack path.
Improper certificate validation in Dell Secure Connect Gateway 5.0 (both Appliance and Application editions) exposes encrypted communications to interception by remote, unauthenticated attackers positioned on the network path. The vulnerability stems from CWE-295 failure to properly verify TLS/SSL certificates, enabling a MITM attacker to present a fraudulent certificate that the product accepts, thereby gaining access to traffic that should be protected. CVSS 5.9 (AC:H) reflects that exploitation requires the attacker to occupy an adversarial network position; no public exploit or KEV listing has been identified at time of analysis.
Hard-coded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 allows a local low-privileged attacker to decrypt protected data, leading to high-severity information disclosure. Both the Appliance form factor (prior to 5.36.00.16) and the Application form factor (prior to 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis, and the local access requirement significantly constrains the attack surface.
Improper locking in Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application allows a low-privileged remote attacker to exploit a synchronization race condition, resulting in unauthorized filesystem access on the affected system. The vendor CVSS vector rates the primary impact as A:H (Availability), yet the description specifically references attacker filesystem access - a tension that suggests possible confidentiality or integrity impact beyond what the official score reflects. Dell has released fixed versions and published advisory DSA-2026-382; no public exploit or active CISA KEV listing exists at time of analysis.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 allows a locally authenticated low-privileged attacker to conduct server-side request forgery, resulting in high confidentiality impact with no integrity or availability loss. Both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00) are affected, as confirmed by Dell Security Advisory DSA-2026-382. No public exploit code and no CISA KEV listing have been identified at time of analysis, placing this in routine patch-cycle priority rather than emergency response.
Cleartext storage of sensitive information in Dell Secure Connect Gateway 5.0 exposes credentials or configuration secrets to any low-privileged local user on the host. Both the hardware Appliance (versions prior to 5.36.00.16) and the virtual Application (versions prior to 5.36.00.00) are affected, as confirmed by Dell Security Advisory DSA-2026-382. No public exploit identified at time of analysis, but the CVSS C:H rating indicates that successful exploitation yields full confidentiality compromise of the stored sensitive material.
Improper certificate validation in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance (prior to 5.36.00.16) and Application/Virtual Edition (prior to 5.36.00.00) - allows an unauthenticated remote attacker with a network man-in-the-middle position to intercept or tamper with TLS-protected communications between the SCG and remote endpoints. The CVSS 5.6 score with AC:H reflects that exploitation is constrained by the requirement for network-level interception capability rather than direct remote access. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Certificate hostname validation bypass in Dell Secure Connect Gateway (SCG) 5.0 enables unauthenticated remote attackers positioned on the network path to perform man-in-the-middle attacks against TLS-protected communications. The flaw (CWE-297) means SCG accepts certificates whose hostname does not match the server being contacted, allowing an adversary to impersonate backend endpoints and intercept or manipulate encrypted traffic. No public exploit code has been identified, and the vulnerability has not been added to the CISA KEV catalog; however, the network-accessible attack vector and absence of required privileges make opportunistic interception feasible for network-adjacent adversaries.
Incorrect permission assignment on critical resources in Dell Secure Connect Gateway 5.0 (both Appliance and Application variants) enables a locally authenticated low-privileged user to read sensitive data they are not authorized to access. Affected are Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, as confirmed in Dell advisory DSA-2026-382. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, though the high confidentiality impact from a CWE-732 flaw in a remote-support gateway warrants prioritized patching for insider-threat scenarios.
OS Command Injection (CWE-78) in Dell Secure Connect Gateway 5.0 permits low-privileged remote attackers to execute arbitrary operating system commands against both the Appliance and Application deployment variants. Affected versions are SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00; Dell has released fixes under advisory DSA-2026-382. No public exploit code or CISA KEV listing has been identified at time of analysis.
Sensitive information exposure in Dell Secure Connect Gateway (SCG) 5.0 allows a low-privileged local attacker to read sensitive data written to application log files without sanitization. Both the Appliance variant (prior to 5.36.00.16) and the Application variant (prior to 5.36.00.00) are affected across all platforms. No public exploit code or active exploitation has been identified; Dell has released fixes via advisory DSA-2026-382.
Hardcoded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 - both Appliance and Application variants - allows a low-privileged local attacker to access protected data encrypted with the embedded key, leading to information disclosure. Affected versions include SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00. Dell has released patched versions via DSA-2026-382; no public exploit or KEV listing has been identified at time of analysis.
Hard-coded credentials in Dell Secure Connect Gateway (SCG) 5.0 enable remote attackers to bypass authentication and access protected system functions. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are confirmed affected per Dell advisory DSA-2026-382. Exploitation exposes sensitive information with high confidentiality impact, and no active exploitation or public proof-of-concept has been identified at time of analysis.
Hard-coded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 allows a local low-privileged attacker to decrypt data that was intended to be cryptographically protected, resulting in high-severity information disclosure. Both the Appliance form factor (versions prior to 5.36.00.16) and the Application form factor (versions prior to 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis; Dell has released patches via advisory DSA-2026-382.
Improper Authentication (CWE-287) in Dell Secure Connect Gateway (SCG) 5.0 enables a remote, low-privileged attacker to bypass protection mechanisms, potentially gaining access to sensitive telemetry or support data beyond their authorized scope. Both the Appliance variant (prior to 5.36.00.16) and Application variant (prior to 5.36.00.00) are affected, as confirmed in Dell advisory DSA-2026-382. No public exploit code or active exploitation has been identified at time of analysis, but the network-accessible attack vector and low authentication bar make patching a clear priority.
Remote unauthenticated denial-of-service in Dell Secure Connect Gateway (SCG) 5.0 allows network-adjacent attackers to crash or disable the gateway's protection mechanisms by sending crafted input that triggers an unhandled exceptional condition (CWE-703). Both the physical Appliance variant (prior to 5.36.00.16) and the virtual Application variant (prior to 5.36.00.00) are affected. The primary impact is loss of availability of the SCG service, meaning the gateway's security inspection or remote-support connectivity function is disrupted; no public exploit or active exploitation has been identified at time of analysis.