VulnSocial

CVE-2026-80238Patch(dell / secure_connect_gateway)

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch dell secure_connect_gateway systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privileges vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This vulnerability is considered critical because a low-privileged operator with SSH access to the SCG host can gain root-level access to the host without requiring a password by leveraging the exposed Docker socket. Additionally, an attacker who compromises a service running within the orchestrator container can access the same socket and escape the container boundary to obtain host-level control. Dell recommends that customers upgrade at the earliest opportunity.

dell CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-250

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • secure_connect_gateway

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 4 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-09-09); latest day: 1
  • 4 total mentions across 3 days

Affected systems

Vendors
dell
Products
secure_connect_gateway

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-09-08: 1Mentions · 2026-09-09: 2Mentions · 2026-09-16: 1Patch / Workaround · 2026-09-08: 1Patch / Workaround · 2026-09-09: 1Patch / Workaround · 2026-09-16: 1Technical Details · 2026-09-08: 1Technical Details · 2026-09-09: 2Technical Details · 2026-09-16: 109-0809-0909-16
Signal classification2 categories
Patch
375.0%
Disclosure
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-09-081
Patch1
2026-09-092
Disclosure1Patch1
2026-09-161
Patch1
Full discourse4 posts
  • VulnTracker@vuln_tracker
    Disclosure

    CVE-2026-80238 (Critical): a local attacker can gain root on Dell Secure Connect Gateway with no password, via an exposed Docker socket. Affected: SCG 5.0 Appliance <5.36.00.16, Application <5.36.00.00 Update now. Details: https://vulntracker.io/cves/CVE-2026-80238 #Dell #CVE #VulnTracker https://t.co/Oaud9XuNqD

    Post summary

    The post announces a critical Dell Secure Connect Gateway vulnerability, noting that a local attacker can achieve root via an exposed Docker socket, and urges users to update.

    01012231
    749 followersView on X
  • GovCERT.CZ@GOVCERT_CZ
    Patch

    🚨 Upozorňujeme na zranitelnosti v Dell Secure Connect Gateway, CVE-2026-80172, CVE-2026-61410 a CVE-2026-80238. CVE-2026-80172 spočívá v nedostatečném ověřování autenticity dat a umožňuje neověřenému vzdálenému útočníkovi opakovaně použít zachycené požadavky, získat administrátorský přístup a obnovovací tokeny. CVE-2026-61410 umožňuje neověřenému vzdálenému útočníkovi prostřednictvím speciálně vytvořených požadavků spouštět příkazy. CVE-2026-80238 umožňuje lokálnímu útočníkovi s nízkými oprávněními získat přístup na úrovni root a uniknout z kontejneru. Ohroženy jsou Dell Secure Connect Gateway 5.0 Application ve verzích starších než 5.36.00.00 a Dell Secure Connect Gateway 5.0 Appliance ve verzích starších než 5.36.00.16. 📌Doporučujeme aktualizovat Dell Secure Connect Gateway 5.0 Application na verzi 5.36.00.00 nebo novější a Dell Secure Connect Gateway 5.0 Appliance na verzi 5.36.00.16 nebo novější.

    Post summary

    The announcement highlights three CVEs in Dell Secure Connect Gateway and urges users to update to the latest patched versions to mitigate the identified vulnerabilities.

    11001617
    4.3K followersView on X
  • CCB Alert@CCBalert
    Patch

    Warning: Critical vulnerabilities in #Dell Secure Connect Gateway. CVE-2026-80172, CVE-2026-61410 & CVE-2026-80238 (CVSS: max 9.8). These flaws allow unauthenticated admin token forging and #RCE! #Patch #Patch #Patch More info: https://www.dell.com/support/kbdoc/en-us/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities

    Post summary

    Dell Secure Connect Gateway faces critical vulnerabilities (CVE‑2026‑80172, CVE‑2026‑61410, CVE‑2026‑80238) with CVSS up to 9.8; the text urges applying Dell’s patch as outlined in the provided support link.

    01000263
    7.2K followersView on X
  • iototsecnews@iototsecnews
    Patch

    Dell SCG の脆弱性 CVE-2026-80172／61410／80238 などが FIX：RCE や Admin 侵害の恐れ https://iototsecnews.jp/2026/09/08/dell-secure-connect-gateway-critical-flaws-allow-unauthenticated-remote-code-execution-and-admin-access/ Dell の監視・サポート接続ツールである Dell Secure Connect Gateway (SCG) において、データの真正性検証の不備／認可の欠如／不適切な実行権限の割り当てに起因する重大なセキュリティ上の問題が特定されました。外部からの不審なリクエストの再送や細工された通信により、未認証での管理者権限の取得／不正なリモートコマンド実行／ホスト環境の乗っ取りといった深刻な被害が生じる恐れがあります。対象製品の導入環境を迅速に特定し、影響を受けるバージョンを最新の修正版へアップデートすることが求められます。なお、本件では CVE-2026-80172／CVE-2026-61410／CVE-2026-80238 が確認されています。 #CVE202661410 #CVE202680172 #CVE202680238 #Vulnerability

    Post summary

    The tweet discloses three Dell Secure Connect Gateway CVEs (CVE‑2026‑80172, CVE‑2026‑61410, CVE‑2026‑80238) that could allow unauthenticated remote code execution and admin compromise due to authentication and authorization flaws, and urges updating affected systems to the latest patched release.

    00000140
    513 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appdellsecure_connect_gateway---
Appdellsecure_connect_gateway---

Explore more

Back to dashboarddell CVEssecure_connect_gateway vulnerabilities