CVE-2026-80134: CWE-798: Use of Hard-coded Credentials in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-80134 describes a use of hard-coded credentials vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application versions before 5.36.00.16 and 5.36.00.00 respectively. This vulnerability enables an unauthenticated attacker with remote network access to exploit the hard-coded credentials, potentially leading to unauthorized access with high confidentiality and integrity impact, and low availability impact. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, and unchanged scope.

An attacker exploiting this vulnerability could gain unauthorized access to the Dell SCG 5.0 system remotely without authentication. This could lead to a complete compromise of confidentiality and integrity of the system, while availability impact is low. No known exploits are reported in the wild at this time.

The vulnerability affects versions prior to 5.36.00.16 (appliance) and 5.36.00.00 (application). Although no explicit patch links are provided, the vendor advisory states the fixed versions, indicating that official fixes are available in these versions. Users should upgrade to at least these versions to remediate the vulnerability. Patch status is confirmed by the version information; therefore, updating to the fixed versions is the recommended mitigation.