CVE-2026-80172
Analyzed Analyzed - Analysis Complete

Authentication Bypass in Dell SCG 5.0 Appliance

Publication date: 2026-09-09

Last updated on: 2026-09-11

Assigner: Dell

Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This vulnerability is considered critical as an unauthenticated attacker can repeatedly reuse a captured request to generate ADMIN access and refresh tokens. Since there is no nonce validation or time limit on requests, the attack can be performed indefinitely. Dell recommends customers to upgrade at the earliest opportunity

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-09
Last Modified
2026-09-11
Generated
2026-09-29
AI Q&A
2026-09-10
EPSS Evaluated
2026-09-27
NVD
CVE-2026-80172
EUVD
EUVD-2026-74853

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
dell secure_connect_gateway to 5.36.00.00 (exc)
dell secure_connect_gateway to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-345 The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Dell SCG 5.0 Appliance and Application versions before 5.36.00.16 and 5.36.00.00 respectively. It involves insufficient verification of data authenticity, allowing an unauthenticated remote attacker to exploit captured requests and generate admin access tokens without limits due to lack of nonce validation or time constraints.

Detection Guidance

This vulnerability cannot be directly detected through standard commands due to its nature involving insufficient verification of data authenticity. Focus on monitoring for unauthorized access or unusual token reuse in Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00.

Impact Analysis

An attacker could gain unauthorized access to the system with admin privileges. This could lead to full control over the Dell Secure Connect Gateway, potential data breaches, manipulation of system settings, or disruption of services.

Compliance Impact

This vulnerability could lead to unauthorized access and data exposure, violating confidentiality requirements in GDPR and HIPAA. Non-compliance may result in legal penalties, fines, and reputational damage due to failure to protect sensitive data.

Mitigation Strategies

Upgrade Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later immediately to address the Insufficient Verification of Data Authenticity vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80172. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart