CVE-2026-80127: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-80127 describes an OS Command Injection vulnerability in Dell Secure Connect Gateway 5.0 Application versions before 5.36.00.00. Improper neutralization of special elements in OS commands allows a remote attacker with high privileges to execute arbitrary commands on the system, potentially elevating their privileges. The vulnerability affects the Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and the SCG 5.0 Application versions prior to 5.36.00.00. The CVSS v3.1 base score is 7.2, indicating high severity with network attack vector, low attack complexity, high privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.

A successful exploit could allow a high privileged remote attacker to execute arbitrary OS commands on the affected system, resulting in elevation of privileges. This could compromise system confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Dell's official advisories for updates and apply any released patches promptly. Until then, restrict remote access to trusted users with high privileges to reduce exposure.