CVE-2026-80172: CWE-345: Insufficient Verification of Data Authenticity in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 16% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Dell recommends customers upgrade to Secure Connect Gateway Appliance version 5.36.00.16 or later and Application version 5.36.00.00 or later at the earliest opportunity. Patch status is confirmed by the vendor advisory recommending these upgrades. No other mitigations are specified.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This vulnerability is considered critical as an unauthenticated attacker can repeatedly reuse a captured request to generate ADMIN access and refresh tokens. Since there is no nonce validation or time limit on requests, the attack can be performed indefinitely. Dell recommends customers to upgrade at the earliest opportunity
Impact
An unauthenticated attacker with remote access can exploit this vulnerability to gain unauthorized administrative access and refresh tokens, potentially leading to full compromise of the affected system. The lack of nonce validation and time limits allows indefinite reuse of captured requests, increasing the risk and ease of exploitation. The CVSS v3.1 score is 9.8, indicating critical severity with high impact on confidentiality, integrity, and availability.
Summary
CVE-2026-80172 is a critical vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application where insufficient verification of data authenticity (CWE-345) allows unauthenticated remote attackers to repeatedly reuse captured requests to obtain administrative access and refresh tokens. The vulnerability arises because the system does not implement nonce validation or time limits on requests, enabling indefinite exploitation. This affects versions prior to 5.36.00.16 for the Appliance and prior to 5.36.00.00 for the Application. Dell advises upgrading to these fixed versions to remediate the issue.