Skip to main content
CVE-2026-80124VulnerabilityPublished 09/09/2026Updated 09/14/2026

CVE-2026-80124: CWE-532: Insertion of Sensitive Information into Log File in Dell Secure Connect Gateway 5.0 - Application

Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5

CVSS 3.1 base score
5.5Medium
Exploitation

Not in CISA KEV, no exploitation reported

EPSS
0.1% chance of exploitation in 30 days – higher than 3% of CVEs
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What to do

AI-suggested

No explicit patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Until a fix is applied, limit local access to trusted users only to reduce risk.

Affected software

ProductAffectedFixed in
DellSecure Connect Gateway 5.0 - ApplicationAffected
  • =0
Fixed in
  • 5.36.00.00 or later
DellSecure Connect Gateway 5.0 - ApplianceAffected
  • =0
Fixed in
  • 5.36.00.16 or later

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

Weaknesses

References

Track Dell Secure Connect Gateway 5.0 - Application with alerts and the API. See plans

Added 09/09/2026 · analysed 09/17/2026 · updated 10/24/2026