CVE-2026-80129: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-80129 is a path traversal vulnerability in Dell Secure Connect Gateway 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00. The vulnerability arises from improper limitation of pathname to restricted directories (CWE-22), which could allow an unauthenticated remote attacker with network access to execute arbitrary code remotely. The CVSS 3.1 vector is AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N, reflecting network attack vector, high attack complexity, no privileges or user interaction required, unchanged scope, low confidentiality impact, high integrity impact, and no availability impact.

An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code remotely, potentially compromising the integrity of the affected system. Confidentiality impact is low, and availability is not affected. The medium CVSS score reflects the moderate risk posed by this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users should monitor Dell's official advisories for updates and apply patches once available.