CVE-2026-80176: CWE-257: Storing Passwords in a Recoverable Format in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-80176 describes a vulnerability in Dell Secure Connect Gateway 5.0 where passwords are stored in a recoverable plaintext format. This weakness could be exploited by a low privileged attacker with local access to the system, potentially leading to disclosure of sensitive password information. The affected versions include Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00. The CVSS v3.1 base score is 4.7 with attack vector local, high attack complexity, low privileges required, no user interaction, unchanged scope, and high confidentiality impact.

The vulnerability allows information disclosure of passwords stored in plaintext by an attacker with local access and low privileges. This could compromise user credentials and potentially lead to further unauthorized access if exploited. There is no indication of impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Dell's advisories for updates. Until a fix is available, restrict local access to trusted users only to reduce risk.