CVE-2026-80239: CWE-1258: Exposure of Sensitive System Information Due to Uncleared Debug Information in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 8% of CVEs
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until a patch is available, restrict physical access to the affected devices to mitigate risk.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to information exposure.
Summary
CVE-2026-80239 describes an information exposure vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application versions before 5.36.00.16 and 5.36.00.00 respectively. The vulnerability arises from uncleared debug information that remains accessible on the system, potentially allowing an attacker with physical access and no authentication to obtain sensitive system information. The CVSS 3.1 vector indicates low impact on confidentiality and no impact on integrity or availability.
Impact
An unauthenticated attacker with physical access to the affected Dell SCG 5.0 device could gain access to sensitive system information through leftover debug data. The impact is limited to confidentiality with no reported effects on system integrity or availability. The overall severity is low.
Weaknesses
References
Community reviews
Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.