PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-80057 Dell CVE debrief

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00 contain a Use of Hard-coded Cryptographic Key vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure. The vulnerability exists in the Dell SCG 5.0 Appliance and Application, which are used for secure connectivity and management. This vulnerability could allow an attacker to access sensitive information. System administrators and security teams should assess exposure and apply the security update provided by Dell.

Vendor
Dell
Product
Secure Connect Gateway 5.0 - Application
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-07
Original CVE updated
2026-09-11
Advisory published
2026-09-07
Advisory updated
2026-09-11

Who should care

System administrators and security teams responsible for Dell SCG 5.0 Appliance and Application deployments should assess exposure and apply the security update. They should also verify the version of Dell SCG 5.0 Appliance and Application in use and ensure it is up-to-date. Additionally, they should restrict local access to the system to minimize the attack surface and monitor system logs for potential exploitation attempts. Inventory checks should be

Why it matters

CVE-2026-80057 is a medium-priority vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application that could lead to information disclosure if exploited. System administrators and security teams should assess exposure, apply the security update, and monitor system logs for potential exploitation attempts.

  • Potential information disclosure due to exploitation by a low-privileged attacker.
  • Verification of system logs to detect potential exploitation attempts.
  • Review and application of the security update provided by Dell.
  • Inventory checks to ensure affected versions are identified and remediated.

Technical summary

The vulnerability exists due to the use of a hard-coded cryptographic key in Dell SCG 5.0 Appliance and Application. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure. The vulnerability affects Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00. The vulnerability could allow an attacker to access sensitive information. Dell has provided a security update to address this vulnerability.

Defensive priority

Medium-priority vulnerability requiring immediate attention due to potential information disclosure.

Recommended defensive actions

  • Review and apply the security update provided by Dell.
  • Verify the version of Dell SCG 5.0 Appliance and Application in use and ensure it is up-to-date.
  • Restrict local access to the system to minimize the attack surface.
  • Monitor system logs for potential exploitation attempts.
  • Perform an inventory check to identify and remediate affected versions.
  • Review compensating controls for exposed systems while remediation is scheduled and verified.
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD vulnerability detail page provide information about the vulnerability, its CVSS score, and affected versions. The vulnerability is caused by the use of a hard-coded cryptographic key in Dell SCG 5.0 Appliance and Application. Evidence is based on official CVE and NVD sources, with limitations on detailed technical information. Dell SCG 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively are affected. The CVE record was published on 2026-09-07T15:17:32.397Z and has not been The

Sources and references

Verified primary and authoritative sources

  • CVE-2026-80057 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-80057

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-80057 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-80057

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.