CVE-2026-80055

Analyzed Analyzed - Analysis Complete

LDAP Injection in Dell SCG Appliance

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Dell

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-80055

EUVD

EUVD-2026-74761

Affected Vendors & Products

Vendor	Product	Version / Range
dell	secure_connect_gateway	to 5.36.00.00 (exc)
dell	secure_connect_gateway	to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-90	The product constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended LDAP query when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is an LDAP injection flaw in Dell SCG 5.0 Appliance versions before 5.36.00.16 and Dell SCG 5.0 Application versions before 5.36.00.00. It allows an unauthenticated remote attacker to inject scripts by manipulating LDAP queries, potentially leading to unauthorized access or data exposure.

Detection Guidance

Detection of CVE-2026-80055 requires checking for LDAP injection vulnerabilities in Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00. No specific commands are provided in the context. Review application logs for unusual LDAP queries or script injection attempts.

Impact Analysis

An attacker could exploit this to execute malicious scripts, potentially gaining access to sensitive data or performing unauthorized actions through the LDAP injection. This may lead to data breaches or system compromise if not mitigated.

Compliance Impact

This vulnerability could lead to unauthorized data access or exposure, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Non-compliance may result in legal penalties or reputational damage.

Mitigation Strategies

Update Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later to address the LDAP injection vulnerability.

Hi! I’m here to help you understand CVE-2026-80055. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70