CVE-2026-80177 is an SQL Injection vulnerability (CWE-89) affecting Dell Secure Connect Gateway 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00. The vulnerability arises from improper neutralization of special elements used in SQL commands, which could be exploited by a low privileged attacker with remote access to inject malicious scripts. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. No official patch or remediation guidance is currently provided by the vendor, and no known exploits are reported in the wild.

Successful exploitation could lead to unauthorized disclosure of sensitive information due to the high confidentiality impact. There is no reported impact on data integrity or system availability. The attack requires low privileges and remote network access but no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict remote access to the affected Dell Secure Connect Gateway 5.0 Appliance and Application versions and monitor for suspicious activity related to SQL injection attempts.