CVE-2026-80170: CWE-798: Use of Hard-coded Credentials in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-80170 describes a use of hard-coded credentials vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application. Versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected. An unauthenticated attacker with remote access could exploit this flaw to bypass security protections. The vulnerability is categorized under CWE-798. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating network attack vector, low attack complexity, requires low privileges, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact.

Successful exploitation could allow an attacker to bypass protection mechanisms, potentially leading to unauthorized access to sensitive information. The confidentiality impact is high, but integrity and availability are not affected. No known exploits are reported in the wild at this time.

The vendor advisory or patch information is not provided in the input data. Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Until a patch is applied, restrict remote access to the affected systems and monitor for unauthorized access attempts.