CVE-2026-80054: CWE-732: Incorrect Permission Assignment for Critical Resource in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-80054 describes an incorrect permission assignment vulnerability (CWE-732) in Dell Secure Connect Gateway 5.0 Appliance and Application. Versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected. The vulnerability allows a low privileged local attacker to exploit improper permissions on critical resources, potentially leading to unauthorized access. The CVSS 3.1 base score is 5.5, reflecting medium severity with high confidentiality impact but no impact on integrity or availability. No known exploits in the wild have been reported. The vendor has not provided explicit patch or remediation information in the input data.

A low privileged attacker with local access could exploit the incorrect permission assignment to gain unauthorized access to critical resources within the Dell SCG 5.0 environment. This could lead to exposure of sensitive information (confidentiality impact is high), but does not affect integrity or availability according to the CVSS vector. There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix details are provided, it is recommended to monitor Dell's security advisories for updates. Until a fix is available, restrict local access to trusted users only to reduce risk.