CVE-2026-80125: CWE-295: Improper Certificate Validation in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-80125 describes an improper certificate validation vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application. Versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected. An unauthenticated attacker with remote network access could exploit this flaw to gain unauthorized access. The vulnerability is classified under CWE-295 (Improper Certificate Validation). The CVSS 3.1 vector is AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact.

Successful exploitation could lead to unauthorized access to the affected Dell SCG 5.0 systems, potentially compromising confidentiality. There is no indication of impact on integrity or availability. The vulnerability requires remote network access but has high attack complexity, reducing the likelihood of exploitation. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users should monitor Dell's security advisories for updates and apply any released fixes promptly.