CVE-2026-80238: CWE-250: Execution with Unnecessary Privileges in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-80238 is an execution with unnecessary privileges vulnerability (CWE-250) affecting Dell Secure Connect Gateway 5.0 Appliance versions before 5.36.00.16 and Application versions before 5.36.00.00. The flaw allows an unauthenticated attacker with local SSH access to the SCG host to bypass protection mechanisms by leveraging the exposed Docker socket, resulting in root-level access without requiring a password. Furthermore, an attacker who compromises a service running inside the orchestrator container can use the same socket to escape the container boundary and gain host-level control. This vulnerability has a CVSS 3.1 score of 9.3 (critical) with high impact on confidentiality, integrity, and availability.

An attacker with low privileges and SSH access to the SCG host can escalate to root-level access without authentication by exploiting the exposed Docker socket. This leads to complete host compromise, including bypassing protection mechanisms. Additionally, container escape is possible if a service inside the orchestrator container is compromised, allowing host-level control. The vulnerability severely impacts confidentiality, integrity, and availability of the affected system.

Dell recommends upgrading Dell Secure Connect Gateway Appliance to version 5.36.00.16 or later and the Application to version 5.36.00.00 or later at the earliest opportunity. No other mitigations or temporary fixes are indicated. Patch status is not explicitly confirmed in the provided data, but the vendor's upgrade recommendation implies an official fix is available. Users should consult Dell's official advisory for precise patch details.