CVE-2026-80238
Received Received - Intake

Execution with Unnecessary Privileges in Dell SCG Appliance

Publication date: 2026-09-07

Last updated on: 2026-09-07

Assigner: Dell

Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privileges vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This vulnerability is considered critical because a low-privileged operator with SSH access to the SCG host can gain root-level access to the host without requiring a password by leveraging the exposed Docker socket. Additionally, an attacker who compromises a service running within the orchestrator container can access the same socket and escape the container boundary to obtain host-level control. Dell recommends that customers upgrade at the earliest opportunity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-07
Last Modified
2026-09-07
Generated
2026-09-07
AI Q&A
2026-09-07
EPSS Evaluated
N/A
NVD
CVE-2026-80238
EUVD
EUVD-2026-72395

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
dell scg to 5.36.00.16 (exc)
dell scg_application to 5.36.00.00 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-250 The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Dell SCG 5.0 Appliance and Application versions before 5.36.00.16 and 5.36.00.00 respectively. It allows an unauthenticated attacker with local access to bypass security protections and gain root-level access to the host system by exploiting the exposed Docker socket. This can happen even without a password. Additionally, compromising a service inside the orchestrator container may let an attacker access the same socket and escape the container to control the host.

Detection Guidance

To detect this vulnerability, check the version of Dell SCG 5.0 Appliance or Application. Run commands like 'show version' or 'docker version' on the SCG host to verify if the version is prior to 5.36.00.16 (Appliance) or 5.36.00.00 (Application). Also inspect for unauthorized Docker socket access or unexpected root-level processes.

Impact Analysis

An attacker could gain full control over the affected Dell SCG host system, allowing them to execute arbitrary commands, access sensitive data, or disrupt operations. Since the vulnerability enables root access, the impact includes complete system compromise, data theft, or unauthorized modifications to the system configuration.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR, HIPAA, and other regulations. It may result in data breaches, loss of confidentiality, and failure to meet security control standards, potentially leading to legal penalties, fines, or reputational damage.

Mitigation Strategies

Immediately upgrade Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later. Restrict SSH access to the SCG host to authorized personnel only and disable unnecessary Docker socket access to prevent privilege escalation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80238. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart