CVE-2026-80171 describes an insufficient entropy issue in the PRNG used by Dell Secure Connect Gateway 5.0 Appliance and Application. Versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected. The vulnerability could be exploited by a low privileged local attacker to elevate privileges. The CVSS v3.1 score is 4.7, reflecting a medium severity with local attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

If exploited, this vulnerability could allow a low privileged local attacker to gain elevated privileges on the affected Dell SCG 5.0 systems. The confidentiality impact is high, meaning sensitive information could be exposed. There is no impact on integrity or availability. The attack requires local access and has high complexity, limiting the likelihood of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users only and monitor for suspicious activity. Follow Dell's security advisories for updates on patches or mitigations.