CVE-2026-80122VulnerabilityPublished 09/09/2026

CVE-2026-80122: CWE-295: Improper Certificate Validation in Dell Secure Connect Gateway 5.0 - Application

Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5

CVSS 3.1 base score

7.3High

Exploitation: Not in CISA KEV, no exploitation reported
EPSS: 0.2% chance of exploitation in 30 days – higher than 11% of CVEs

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

What to do

AI-suggested

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor Dell's security advisories for updates. No specific temporary mitigations are documented at this time.

Affected software

Product	Affected	Fixed in
DellSecure Connect Gateway 5.0 - Application	Affected =0	Fixed in 5.36.00.00 or later
DellSecure Connect Gateway 5.0 - Appliance	Affected =0	Fixed in 5.36.00.16 or later

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

Summary

CVE-2026-80122 is an improper certificate validation vulnerability in Dell Secure Connect Gateway 5.0 Application and Appliance. Versions prior to 5.36.00.00 (Application) and 5.36.00.16 (Appliance) are affected. An unauthenticated attacker with remote access could exploit this flaw to bypass certificate validation checks, potentially leading to unauthorized access. The vulnerability is classified under CWE-295. The CVSS v3.1 base score is 7.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available to confirm remediation status.

Impact

The vulnerability allows an unauthenticated remote attacker to bypass certificate validation, which could lead to unauthorized access to the affected Dell Secure Connect Gateway 5.0 Application or Appliance. This may compromise confidentiality, integrity, and availability of the system. The high CVSS score reflects the potential severity of this impact. However, no known exploits have been reported in the wild.

Weaknesses

CWE-295Improper Certificate Validation (opens in a new tab)

References

dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities (opens in a new tab)

What to do

Affected software

Description

AnalysisAI-generated, updated 09/09/2026, 08:52:06 UTC

Technical details

Weaknesses

References

Related threats