VulnSocial

CVE-2026-61410Patch(dell / secure_connect_gateway)

LOWCVSS 9.4 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch dell secure_connect_gateway systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerability is considered critical because it allows an attacker to execute commands remotely on a target system by sending a specially crafted request to the application, bypassing intended restrictions on code execution.Dell recommends customers to upgrade at the earliest opportunity.

dell CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • secure_connect_gateway

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 4 signals
  • Technical details provided in 4 signals
  • Disclosure: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-09-08); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
dell
Products
secure_connect_gateway

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-09-08: 1Mentions · 2026-09-09: 1Mentions · 2026-09-12: 1Mentions · 2026-09-16: 1Patch / Workaround · 2026-09-08: 1Patch / Workaround · 2026-09-09: 1Patch / Workaround · 2026-09-12: 1Patch / Workaround · 2026-09-16: 1Technical Details · 2026-09-08: 1Technical Details · 2026-09-09: 1Technical Details · 2026-09-12: 1Technical Details · 2026-09-16: 109-0809-0909-1209-16
Signal classification2 categories
Patch
375.0%
Disclosure
125.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-081
Patch1
2026-09-091
Patch1
2026-09-121
Disclosure1
2026-09-161
Patch1
Full discourse4 posts
  • GovCERT.CZ@GOVCERT_CZ
    Patch

    🚨 Upozorňujeme na zranitelnosti v Dell Secure Connect Gateway, CVE-2026-80172, CVE-2026-61410 a CVE-2026-80238. CVE-2026-80172 spočívá v nedostatečném ověřování autenticity dat a umožňuje neověřenému vzdálenému útočníkovi opakovaně použít zachycené požadavky, získat administrátorský přístup a obnovovací tokeny. CVE-2026-61410 umožňuje neověřenému vzdálenému útočníkovi prostřednictvím speciálně vytvořených požadavků spouštět příkazy. CVE-2026-80238 umožňuje lokálnímu útočníkovi s nízkými oprávněními získat přístup na úrovni root a uniknout z kontejneru. Ohroženy jsou Dell Secure Connect Gateway 5.0 Application ve verzích starších než 5.36.00.00 a Dell Secure Connect Gateway 5.0 Appliance ve verzích starších než 5.36.00.16. 📌Doporučujeme aktualizovat Dell Secure Connect Gateway 5.0 Application na verzi 5.36.00.00 nebo novější a Dell Secure Connect Gateway 5.0 Appliance na verzi 5.36.00.16 nebo novější.

    Post summary

    The post outlines Dell Secure Connect Gateway vulnerabilities CVE‑2026‑80172, CVE‑2026‑61410, CVE‑2026‑80238, describes their technical impact, and urges applying the recommended patches—no PoC or exploit code is mentioned.

    11001617
    4.3K followersView on X
  • CCB Alert@CCBalert
    Patch

    Warning: Critical vulnerabilities in #Dell Secure Connect Gateway. CVE-2026-80172, CVE-2026-61410 & CVE-2026-80238 (CVSS: max 9.8). These flaws allow unauthenticated admin token forging and #RCE! #Patch #Patch #Patch More info: https://www.dell.com/support/kbdoc/en-us/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities

    Post summary

    The post warns about critical Dell Secure Connect Gateway vulnerabilities and urges users to apply the available Dell patches.

    01000263
    7.2K followersView on X
  • iototsecnews@iototsecnews
    Patch

    Dell SCG の脆弱性 CVE-2026-80172／61410／80238 などが FIX：RCE や Admin 侵害の恐れ https://iototsecnews.jp/2026/09/08/dell-secure-connect-gateway-critical-flaws-allow-unauthenticated-remote-code-execution-and-admin-access/ Dell の監視・サポート接続ツールである Dell Secure Connect Gateway (SCG) において、データの真正性検証の不備／認可の欠如／不適切な実行権限の割り当てに起因する重大なセキュリティ上の問題が特定されました。外部からの不審なリクエストの再送や細工された通信により、未認証での管理者権限の取得／不正なリモートコマンド実行／ホスト環境の乗っ取りといった深刻な被害が生じる恐れがあります。対象製品の導入環境を迅速に特定し、影響を受けるバージョンを最新の修正版へアップデートすることが求められます。なお、本件では CVE-2026-80172／CVE-2026-61410／CVE-2026-80238 が確認されています。 #CVE202661410 #CVE202680172 #CVE202680238 #Vulnerability

    Post summary

    Dell Secure Connect Gateway (SCG) contains critical vulnerabilities (CVE‑0172‑0? / CVE‑0? / CVE‑0?) due to authentication, authorization, and privilege‑assignment flaws, enabling unauthenticated RCE and admin takeover via request replay or crafted traffic; the advisory urges updating to the latest patched version.

    00000140
    513 followersView on X
  • DFIR Lab@DFIR_Lab
    Disclosure

    🚨 CRITICAL: CVE-2026-61410 (CVSS 9.4) - Dell SCG 5.0 Missing Authorization flaw allows unauthenticated remote code execution. Affects Appliance <5[.]36[.]00[.]16 & Application <5[.]36[.]00[.]00. Upgrade immediately. #CVE #PatchNow https://t.co/s2RUFNnQYk

    Post summary

    Dell SCG 5.0 has a critical missing‑authorization flaw (CVE‑2026‑61410) that allows unauthenticated remote code execution; users are urged to upgrade immediately.

    0000044
    133 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appdellsecure_connect_gateway---
Appdellsecure_connect_gateway---

Explore more

Back to dashboarddell CVEssecure_connect_gateway vulnerabilities