CVE-2026-80128: CWE-287: Improper Authentication in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-80128 is an improper authentication vulnerability (CWE-287) affecting Dell Secure Connect Gateway 5.0 Appliance versions before 5.36.00.16 and Application versions before 5.36.00.00. This vulnerability enables a low privileged attacker with remote access to bypass authentication protections, potentially compromising confidentiality, integrity, and availability of the system. The CVSS v3.1 base score is 6.4, reflecting network attack vector, high attack complexity, low privileges required, no user interaction, and impacts to confidentiality (high), integrity (low), and availability (low).

Successful exploitation could allow an attacker with low privileges and remote access to bypass authentication mechanisms, leading to unauthorized access that compromises confidentiality, partially impacts integrity, and availability of the affected system. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch links are provided, users should monitor Dell's security advisories for updates and apply patches once available. Until then, restrict remote access to the affected systems and apply compensating controls to limit exposure.