VulnSocial

CVE-2026-80172Patch(dell / secure_connect_gateway)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch dell secure_connect_gateway systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This vulnerability is considered critical as an unauthenticated attacker can repeatedly reuse a captured request to generate ADMIN access and refresh tokens. Since there is no nonce validation or time limit on requests, the attack can be performed indefinitely. Dell recommends customers to upgrade at the earliest opportunity

dell CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-345

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • secure_connect_gateway

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 4 signals
  • Technical details provided in 4 signals
  • General: 1 classified signal
  • Peaked 2d ago at 2 mentions (2026-09-08); latest day: 1
  • 5 total mentions across 4 days

Affected systems

Vendors
dell
Products
secure_connect_gateway

Deep dive

Activity timeline5 mentions / 4d
01122Mentions · 2026-09-07: 1Mentions · 2026-09-08: 2Mentions · 2026-09-09: 1Mentions · 2026-09-16: 1Patch / Workaround · 2026-09-07: 1Patch / Workaround · 2026-09-08: 1Patch / Workaround · 2026-09-09: 1Patch / Workaround · 2026-09-16: 1Technical Details · 2026-09-07: 1Technical Details · 2026-09-08: 1Technical Details · 2026-09-09: 1Technical Details · 2026-09-16: 109-0709-0809-0909-16
Signal classification2 categories
Patch
480.0%
General
120.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-09-071
Patch1
2026-09-082
General1Patch1
2026-09-091
Patch1
2026-09-161
Patch1
Full discourse5 posts
  • GovCERT.CZ@GOVCERT_CZ
    Patch

    🚨 Upozorňujeme na zranitelnosti v Dell Secure Connect Gateway, CVE-2026-80172, CVE-2026-61410 a CVE-2026-80238. CVE-2026-80172 spočívá v nedostatečném ověřování autenticity dat a umožňuje neověřenému vzdálenému útočníkovi opakovaně použít zachycené požadavky, získat administrátorský přístup a obnovovací tokeny. CVE-2026-61410 umožňuje neověřenému vzdálenému útočníkovi prostřednictvím speciálně vytvořených požadavků spouštět příkazy. CVE-2026-80238 umožňuje lokálnímu útočníkovi s nízkými oprávněními získat přístup na úrovni root a uniknout z kontejneru. Ohroženy jsou Dell Secure Connect Gateway 5.0 Application ve verzích starších než 5.36.00.00 a Dell Secure Connect Gateway 5.0 Appliance ve verzích starších než 5.36.00.16. 📌Doporučujeme aktualizovat Dell Secure Connect Gateway 5.0 Application na verzi 5.36.00.00 nebo novější a Dell Secure Connect Gateway 5.0 Appliance na verzi 5.36.00.16 nebo novější.

    Post summary

    The post alerts about three CVEs in Dell Secure Connect Gateway, describes their technical impact, and recommends patching to the latest versions. It provides no evidence of active exploitation or PoC.

    11001617
    4.3K followersView on X
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    A Dell Secure Connect Gateway vulnerability (CVE-2026-80172, CVSS 9.8) grants unauthorized access via forged admin tokens. Patch SCG now. #Dell #SecureConnectGateway #CVE202680172 #RCE #UnauthorizedAccess #PatchNow #Infosec #SCG https://securityonline.info/dell-scg-cve-2026-80172/ https://t.co/lgMWzTMETh

    Post summary

    Dell Secure Connect Gateway CVE-2026-80172 is a high‑severity RCE that permits unauthorized access via forged admin tokens; Dell urges users to apply the patch immediately.

    00021468
    13.0K followersView on X
  • CCB Alert@CCBalert
    Patch

    Warning: Critical vulnerabilities in #Dell Secure Connect Gateway. CVE-2026-80172, CVE-2026-61410 & CVE-2026-80238 (CVSS: max 9.8). These flaws allow unauthenticated admin token forging and #RCE! #Patch #Patch #Patch More info: https://www.dell.com/support/kbdoc/en-us/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities

    Post summary

    Dell Secure Connect Gateway hosts three critical CVEs enabling token forging and RCE; Dell’s security update addresses the issue.

    01000263
    7.2K followersView on X
  • iototsecnews@iototsecnews
    Patch

    Dell SCG の脆弱性 CVE-2026-80172／61410／80238 などが FIX：RCE や Admin 侵害の恐れ https://iototsecnews.jp/2026/09/08/dell-secure-connect-gateway-critical-flaws-allow-unauthenticated-remote-code-execution-and-admin-access/ Dell の監視・サポート接続ツールである Dell Secure Connect Gateway (SCG) において、データの真正性検証の不備／認可の欠如／不適切な実行権限の割り当てに起因する重大なセキュリティ上の問題が特定されました。外部からの不審なリクエストの再送や細工された通信により、未認証での管理者権限の取得／不正なリモートコマンド実行／ホスト環境の乗っ取りといった深刻な被害が生じる恐れがあります。対象製品の導入環境を迅速に特定し、影響を受けるバージョンを最新の修正版へアップデートすることが求められます。なお、本件では CVE-2026-80172／CVE-2026-61410／CVE-2026-80238 が確認されています。 #CVE202661410 #CVE202680172 #CVE202680238 #Vulnerability

    Post summary

    Dell Secure Connect Gateway の複数の CVE について、未認証の管理者権限取得やRCEを伴う重大な脆弱性が報告されています。本文は修正版へのアップデートを明記しているため、Patch が主分類となります。

    00000140
    513 followersView on X
  • キタきつね@foxbook
    General

    Dell SCG CVE-2026-80172: Critical Flaw Allows Attackers to Generate ADMIN Tokens（Dell Secure Connect Gatewayに重大な脆弱性、攻撃者がADMINトークンを生成可能） #SecurityOnline (Sep 8) https://securityonline.info/dell-scg-cve-2026-80172/

    Post summary

    The tweet alerts to CVE-2026-80172, a critical flaw in Dell Secure Connect Gateway that lets attackers generate ADMIN tokens, but it provides no PoC, exploit code, patch, or detailed technical information.

    00000298
    5.0K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appdellsecure_connect_gateway---
Appdellsecure_connect_gateway---

Explore more

Back to dashboarddell CVEssecure_connect_gateway vulnerabilities