CVE-2026-80169

Analyzed Analyzed - Analysis Complete

Dell SCG Appliance Log File Information Exposure Vulnerability

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Dell

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-80169

EUVD

EUVD-2026-74892

Affected Vendors & Products

Vendor	Product	Version / Range
dell	secure_connect_gateway	to 5.36.00.00 (exc)
dell	secure_connect_gateway	to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

Executive Summary

Dell SCG 5.0 Appliance versions before 5.36.00.16 and Dell SCG 5.0 Application versions before 5.36.00.00 have a flaw where sensitive information is logged. A low-privileged attacker with local access could exploit this to expose sensitive data through log files.

Detection Guidance

This vulnerability involves sensitive information being logged locally. Check Dell SCG appliance logs for unexpected data exposure. Review logs in /var/log/ for files related to Dell SCG 5.0. Look for entries containing credentials or sensitive configuration details. Ensure log retention policies are followed to detect anomalies.

Impact Analysis

This vulnerability could lead to unauthorized access to sensitive information stored in log files. If exploited, it may expose confidential data such as user credentials, system configurations, or other sensitive details to attackers with local access.

Compliance Impact

This vulnerability could result in non-compliance with GDPR or HIPAA due to unauthorized exposure of sensitive data. GDPR requires protection of personal data, while HIPAA mandates safeguarding protected health information. Exploitation may lead to violations and potential legal consequences.

Mitigation Strategies

Update Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-80169. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70