CVE-2026-80123
Analyzed Analyzed - Analysis Complete

Server-Side Request Forgery in Dell SCG Appliance

Vulnerability report for CVE-2026-80123, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Dell

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-09
Last Modified
2026-09-09
Generated
2026-09-29
AI Q&A
2026-09-09
EPSS Evaluated
2026-09-27
NVD
EUVD

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
dell secure_connect_gateway to 5.36.00.00 (exc)
dell secure_connect_gateway to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Server-Side Request Forgery (SSRF) vulnerability in Dell SCG 5.0 Appliance versions before 5.36.00.16 and Dell SCG 5.0 Application versions before 5.36.00.00. An unauthenticated attacker with remote access could exploit it to cause a denial of service.

Detection Guidance

Detection of this SSRF vulnerability in Dell SCG appliances requires checking the version of the installed software. If the version is prior to 5.36.00.16 for the appliance or 5.36.00.00 for the application, the system is vulnerable. Use commands like 'show version' or 'rpm -qa | grep dell' to verify the installed version.

Impact Analysis

An attacker could exploit this to disrupt services by sending unauthorized requests from the affected system, leading to potential downtime or degraded performance.

Compliance Impact

The SSRF vulnerability in Dell SCG could potentially lead to unauthorized access or disruption of services, which may impact compliance with standards like GDPR or HIPAA by exposing sensitive data or interrupting critical operations. However, specific compliance impacts are not detailed in the provided CVE information.

Mitigation Strategies

Update Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later to address the SSRF vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80123. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart